last executing test programs:

3.764544308s ago: executing program 4 (id=2761):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040)
socket$xdp(0x2c, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f)
close(0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
pselect6(0x40, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x2000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000200018130000", @ANYRES32=r6, @ANYBLOB="0000000000000000850000002600000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000bc0)=@newlink={0x60, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x60}}, 0x0)

2.916668729s ago: executing program 0 (id=2772):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) (async)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8b}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000ae"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
socket$kcm(0x11, 0x2, 0x300) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.739048606s ago: executing program 3 (id=2775):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r1, 0x28, 0x6, &(0x7f0000002080)=""/4116, &(0x7f00000000c0)=0x1014)
getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000640)=[@in6={0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}]}, &(0x7f0000000180)=0x10)
socket$phonet(0x23, 0x2, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000280), &(0x7f0000000300)=0x4)
listen(r3, 0x0)
sendmmsg$inet6(r3, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004810)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x444004e, r5})
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r7=>0x0})
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7})

2.559126654s ago: executing program 0 (id=2777):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}]}}]}, 0x40}}, 0x0)

2.444253849s ago: executing program 4 (id=2780):
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = accept$phonet_pipe(r0, &(0x7f0000000280), &(0x7f00000000c0)=0x10)
sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}], 0x1, 0xc000)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'erspan0\x00', <r3=>0x0})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00')
ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000200)='bridge0\x00')
r6 = socket$inet(0x2, 0x80001, 0x84)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b000008001700", @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20000080)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r3, @ANYBLOB="05042fbd7000ffdbdf250100000008000100", @ANYRES32=r9], 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x400e8c0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c001880080001400100000000000000000000020800034000000002240001801400018008000100e000000108000200e00000010c000280050001000000000004001640440010"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
getsockopt$inet_mreqsrc(r0, 0x0, 0x25, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r10, 0x0, 0x20}, 0xc)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, 0x10)

2.330595504s ago: executing program 0 (id=2782):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)

2.263361834s ago: executing program 0 (id=2783):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002480)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b409859a3cb7dbf298c7802264387811e20a0d78489eab0b0e", @ANYBLOB="b1e89de5f90c58874c60583a1f815b2abec3d966ed5e58647d465af5b3601e4d55c268c667c6b0f3e18586362cb39dab10369515b187615978046ec1a45f9192cb36845a6e9ec021d7c78439ae777cd0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffb7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(0xffffffffffffffff)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
r5 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x3}, 0xc854)
setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
sendfile(r3, r4, 0x0, 0xffffffff000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f00000001c0))
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r7 = accept4(r6, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
sendmmsg$unix(r7, 0x0, 0x0, 0xc000)
pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)

2.159047018s ago: executing program 2 (id=2785):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
unshare(0x2c020400)
r1 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$kcm(r1, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2008}, 0x44041)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r3, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)}}], 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'dvmrp1\x00'}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)
shutdown(r3, 0x1)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8)

2.103107505s ago: executing program 4 (id=2786):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076fcb2578280657468315f746f5f6272696467650014000100776732000000000000000000000000151400010076657468305f746f5f7465616d0000001400d0cf176f65e18e67bde1e3b82a5904d2fb0b98ed86fa88dca80364efb9563d966b9e641b972866cba4e4f3fe9754d8e187c3a884b3f2e54b24f3e58808999a40f980fdd61a55b9"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000480)="730934bc73cefca49aa589ab5747")
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x7, 0x10002}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x7c, r5, 0x8, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x60, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf691}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
syz_emit_ethernet(0x96, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500600601fe8000000000000000000000000000bbfe8000000000000000000000000000aafffc4e22f2930a1bb9f59717804c37cbed226f4a225cdc117071f3740bb0700c04e1888a95b3aa6fd58806a994cdb51cdcf9e8ace876d9bd4a288a000ced98da349785", @ANYRES16=r6, @ANYRES32=0x41424344, @ANYBLOB="80020000"], 0x0)

1.922321999s ago: executing program 2 (id=2788):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040))
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x2c020400)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0)
getsockname$netlink(r2, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000240)="41d09292b4f9bada89cd637b86dd", 0xe, 0x4040841, &(0x7f0000000200)={0x11, 0x498f3ac4d165322f, r3, 0x1, 0x4}, 0x14)

1.776259486s ago: executing program 3 (id=2790):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0xfffffffffffffffe)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r2, 0x8b32, &(0x7f0000000040))
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1414aa0000000033000000ffffffff000000000000000000000000200000000000000000000000000000000000000000000000050000000000000068482c4500000000f1ffffffffffffff03000000000000000000000000000000000000000000004000000000000000000100000000004000feffffffffffffff000000000000000096070000000800000000000000000000030000000000000000000000b1a001000c001c"], 0x10c}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) (async)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0xfffffffffffffffe) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
ioctl(r2, 0x8b32, &(0x7f0000000040)) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1414aa0000000033000000ffffffff000000000000000000000000200000000000000000000000000000000000000000000000050000000000000068482c4500000000f1ffffffffffffff03000000000000000000000000000000000000000000004000000000000000000100000000004000feffffffffffffff000000000000000096070000000800000000000000000000030000000000000000000000b1a001000c001c"], 0x10c}}, 0x0) (async)

1.735700592s ago: executing program 2 (id=2791):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x34, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x24, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @typed={0xc, 0xa3, 0x0, 0x0, @u64=0x5}]}]}, 0x34}], 0x1}, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', <r3=>0x0, 0x29, 0xb, 0x4, 0x4, 0x2, @loopback, @private2, 0x7800, 0x10, 0x6, 0x6}})
connect$can_bcm(r2, &(0x7f00000003c0)={0x1d, r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff3}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="79000000ec7ba12620499faaa57d5feb5406007ca34cdbc21b0a150013f462ded5aa635e5cb8e1879228370b91d2", @ANYRES16=r5, @ANYBLOB="94032cbd7000fcdbdf2503000000080006005a00000008000600130000001400018008000800f7ffffff080009001f0000003000018014000300fc02000000000000000000000000000108000b0073697000080009005d00000008000900510000000800060052df00000800060001000000"], 0x78}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="20000280", @ANYRES32=r4, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.587324804s ago: executing program 3 (id=2793):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r4, 0x6}, &(0x7f0000000180)=0x8)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r6, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x0)
unshare(0x6020400)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r8], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r8, 0x28, 0x6, &(0x7f0000000680), 0x10)
sendmsg$rds(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r9 = socket(0x10, 0x803, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r9, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x140b, 0x200, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8005}, 0x40000)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "407327c360"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x9}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x190, r6, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xb, 0x61}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x21f}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x80, 0x5b, "0a4661d47bb451ea99a46470d7c88cedf729442a051d60871b8438e70b50f425d4a5a49bd6ac2d3bb7559bf23ef5336d5ee1e3df77a418901a1caeeb17b2f7f3983282032efb71213c3fc79073e3e10dd84b154b3cf694745e89d1f5be404aa5fbe5c8259d5cb13d080f114d16311de7707d138db85f27dc2015be2b"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0x3a, 0x5b, "7efceee960c725e23489ba7d47b945b3e741ae59d05de0ff42a1593b0aa68d2851e3f3b43ed918a9923f6b83c2b0627d3847d9acc282"}, @NL80211_ATTR_FRAME_MATCH={0x81, 0x5b, "d1d1485d63480c90069f39c14c13d50c52d3291ad10e1e7ca9dba63796d57f78c65d0e4ae52b240a7f3274e895c1c412b87a4c167e54d52c93e24371c295b9307a814c3c7c503684e35f6ebc42701a806e429f3621ad14544bfb7bac54ed89ef92af2e089afda7d9b207cb62b14ed1cd7d418e438e17a514333f83af7e"}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20044085)

1.539192907s ago: executing program 2 (id=2794):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0xbc}}, 0x20004010)

1.38452523s ago: executing program 3 (id=2796):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000840)={<r4=>r0, &(0x7f0000000740)='\x05(.\x9d\x00', 0x404000, &(0x7f0000000780)={@_ha_fsid={[0x7, 0x922]}, {0x5, 0x3, 0x83, 0xf818}}, 0x8, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0x5})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000040)={0x14, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000380))
r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
recvmmsg(r8, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/3, 0x3}], 0x1, &(0x7f0000000240)=""/244, 0xf4}, 0x200}, {{&(0x7f0000000400)=@qipcrtr, 0x80, 0x0}, 0x63cf046e}], 0x2, 0x1, 0x0)
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14)
write(r9, &(0x7f0000000000)="240000001a005f0214f9f4070009040009ffef00fe0000000000000008000f00fd000000", 0x24)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008054)
write$nci(r7, &(0x7f00000003c0)=ANY=[], 0x52)
close(r7)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x44000)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000340)={{r6, &(0x7f00000001c0)='\x00', 0x44000, &(0x7f0000000200)={@_ha_fsid={[0xccf, 0x2]}, {0xd, 0x3ff, 0x8, 0xf44}}, 0x9, &(0x7f0000000240)={@_ha_fsid}, 0x0}, {[0x2, 0x3ff, 0x3fc, 0xfffffffb]}, 0xfffffffd, 0x6c, &(0x7f00000002c0)=""/108})
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x40000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r10=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@can_newroute={0x90, 0x18, 0x400, 0x70bd28, 0x25dfdbfd, {0x1d, 0x1, 0x5}, [@CGW_LIM_HOPS={0x5}, @CGW_DST_IF={0x8, 0xa, r10}, @CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x0, 0x0, 0x1}, 0x7, 0x3, 0x0, 0x0, "ff85068fa8b5d6eb"}}}, @CGW_FILTER={0xc, 0xb, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "e8dcbd4ca7525a30"}, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1}, 0x2, 0x1, 0x0, 0x0, "05f563ba44bebd7b"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffa, 0xfffffffffffffff9, 0xd}}, @CGW_CS_XOR={0x8, 0x5, {0x1, 0x1, 0x1, 0xf7}}, @CGW_CS_XOR={0x8, 0x5, {0x3, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x2}}]}, 0x90}}, 0x1)

1.372470144s ago: executing program 2 (id=2797):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040), 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x46, 0x2f, 0xff, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x892f, [0x80]}, {}, {}, {0xa888}}}}}}}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0)
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
close(0xffffffffffffffff)
socket(0x14, 0x2, 0x4)
connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0xc5, 0x3}}, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
shutdown(r3, 0x1)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002300)={{{@in6=@private2, @in=@remote, 0x4e21, 0x1000, 0x4e22, 0x5, 0x2, 0x20, 0x120, 0x21, 0x0, 0xee01}, {0x5, 0x80, 0x9, 0x20000000000030, 0x80000001, 0x4, 0x6, 0x401}, {0x2, 0x5, 0x5, 0x3}, 0x7fffffff, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0xfc}, 0x4d2, 0x2b}, 0x2, @in6=@private2, 0x3506, 0x0, 0x1, 0xfc, 0x10000003, 0x6, 0x5}}, 0xe8)
close(0x3)
recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x40002e9, 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000)

1.236061089s ago: executing program 1 (id=2798):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, <r1=>0x0, 0x0}}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x14, 0x25, 0x301, 0x70bd29, 0x25dfdbfd, {0x19}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x3e59cdaa2f3e420c)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000000280)={0x0, 0x48, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x4f, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bind$nfc_llcp(r5, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r5, 0x118, 0x2, 0x0, &(0x7f00000003c0))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="0cff0900a244984f2595f43dfb1e", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000002c0)={'team0\x00', <r7=>0x0})
sendmmsg$inet(r5, &(0x7f0000002b80)=[{{&(0x7f0000000400)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000440)="57f8a6ff965670ddaa8a63dc536ce4804219545dad315e8b9652a532cc15e9e0bb2cd58c2bd2d09e7f79d0fd7a275f9cba75738f3679", 0x36}], 0x1, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xc}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x70}}, {{&(0x7f0000000680)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000002a80)=[{&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="e18588275437074c73743f2c5cb8ca4b56d00ecf8f9dd71f4ae0969072bd78670f493774108d1aaff89361231b74cf3bb1f8a62bb1d1b78258cccc5bf7e6c292640750", 0x43}, {&(0x7f0000002900)="411e4b714b450a9b4dd2c027c93ee1c017b13b901241a4f2b28d51bbcc7062fb51918ac20e8afe5a7d75cc7f1e28459906b9902d95d7f64b547573200ce127575071ad53da826baec423d93ca2e2e52ed4cb7cbff933c282a2bb79ef41bf87fcbefe11603e86e87cf79418af0dbd57d166a7f5acca34fc73de91d4225cdad1597b706296aef4d24d49fef141e639556004bd0fb74993d2d76f3786104cbe4195e5b36a36584febc79062992e1e823a8e139f58edc38f5c7e1596e52c76a42e528684ea2d441e3b21c25e5913107a6ca7af2e67c505cc7278448bbee6fc0bb4f6525920797314d3", 0xe7}, {&(0x7f0000002a00)="e106f309145a028e52c218c9d4884249a3f86a77a38698", 0x17}, {&(0x7f0000002a40)="c5346ba375142aeba5c862620cac76d5df9308d78213bc1acc72dcf6f7bbd3e704565604", 0x24}], 0x5, &(0x7f0000002b00)=[@ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xf, "698853758086dc750edbbf9d45"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}], 0x68}}], 0x2, 0x84)
bind$xdp(r3, &(0x7f0000000380)={0x2c, 0x8, r7, 0x2a, r3}, 0x10)

1.235528714s ago: executing program 4 (id=2799):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x87, &(0x7f0000000480)=""/135, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe92}, 0x21)
read(r3, &(0x7f0000000080)=""/38, 0x26)
syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000980)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0)
epoll_wait(r5, 0x0, 0x0, 0xffffffff)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0x7, 0x403}]})
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x800)

1.235156167s ago: executing program 0 (id=2800):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r1, 0x28, 0x6, &(0x7f0000002080)=""/4116, &(0x7f00000000c0)=0x1014)
getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000640)=[@in6={0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}]}, &(0x7f0000000180)=0x10)
socket$phonet(0x23, 0x2, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000280), &(0x7f0000000300)=0x4)
listen(r3, 0x0)
sendmmsg$inet6(r3, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004810)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x444004e, r5})
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r7=>0x0})
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7})

914.149919ms ago: executing program 1 (id=2801):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket(0xa, 0x5, 0x0)
listen(r1, 0x100)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084000000050000007f"], 0x18, 0x48d5}, 0x20008050)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000200000000000000008001e8040000000", 0x24)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x11, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x7)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
close(0x4)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x2f, @rand_addr=0x64010105, 0x4e1f, 0x3, 'wlc\x00', 0x0, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_timeval(r10, 0x1, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r11=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r6)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r12, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xf}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x101}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xf1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xa7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xb}]}, 0x64}, 0x1, 0x0, 0x0, 0x30004891}, 0x20040011)

793.414741ms ago: executing program 1 (id=2802):
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES32], 0x38}}], 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000340)=0x600, 0x4)
syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907800011e030000"], 0x0)

706.009902ms ago: executing program 1 (id=2803):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000004c0), 0x4) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340000000000800024000000000080001400000001508000440000000020900090000007a30000000000900020073797a32000000e1140000001100010000000000000000000000000a"], 0x8c}}, 0x0) (async)
r3 = socket$kcm(0xa, 0x2, 0x0) (async)
r4 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x11, 0x12, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000ee0500000018000000", @ANYRES8=r4, @ANYRES32=<r5=>r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b, 0x0, 0x0, 0x10, 0x2}, 0x94)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)}, 0x90) (async)
recvmsg(r6, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x18}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRESDEC=r7, @ANYBLOB="02200000000000001c00128009000100626f6e64000000000c00028008001e0020000000", @ANYRESDEC=r5], 0x3c}, 0x1, 0x0, 0x0, 0x16}, 0x0)

563.12386ms ago: executing program 1 (id=2804):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x74}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
r1 = socket(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000240)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d323456511000000caaf6c26c274214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160000000000403622a590ef62f6b0f8eca0faed00000000", 0x78, 0x4000000, 0x0, 0x0) (async)
sendto$inet6(r1, &(0x7f0000000240)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d323456511000000caaf6c26c274214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160000000000403622a590ef62f6b0f8eca0faed00000000", 0x78, 0x4000000, 0x0, 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x200, 0xf, 0x3, 0x64f1}, {0x8, 0x66, 0xe3, 0x7}, {0xb9, 0x7, 0x6, 0xb}]}, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff)

516.331239ms ago: executing program 2 (id=2805):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)={0x48, r4, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0xfffc}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000080)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x5, 0x2, 0x7, 0x1, 0x1, 0x10000}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r6)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

514.753702ms ago: executing program 1 (id=2806):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000003850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)={0xc4, r4, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x98, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a<y\x17p\x7f\xe9\xbc\xe1B\xb8\x97\x1a_+\xe0\xa4\xb07\xa8|X\xf5s\xde\xd7$\a'}]}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xc4}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x8c, 0x30, 0xb, 0x70bd2b, 0x25dfdbfb, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0xf45}, @TCA_CT_ACTION={0x6, 0x3, 0x2d}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x5, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008890}, 0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r8 = accept(r3, &(0x7f0000000000)=@ax25={{0x3, @netrom}, [@rose, @remote, @rose, @netrom, @remote, @bcast, @rose, @default]}, &(0x7f0000000180)=0x80)
bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x2, r7, 0x4, r8}, 0x10)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
recvmsg$can_bcm(r8, &(0x7f0000000a80)={&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000440)=""/217, 0xd9}, {&(0x7f0000000680)=""/246, 0xf6}, {&(0x7f0000000880)=""/100, 0x64}, {&(0x7f0000000940)=""/42, 0x2a}, {&(0x7f0000000980)=""/74, 0x4a}], 0x5}, 0x1)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r13=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r11, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x48}, 0x4, 0x700000000000000}, 0x0)
r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r10, &(0x7f0000000b00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000600)={0x14, r14, 0x1, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x440d0}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

431.357244ms ago: executing program 3 (id=2807):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20040800)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x10)
writev(r1, &(0x7f0000000040), 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = accept(0xffffffffffffffff, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r5, 0x0, 0x21, &(0x7f0000000000)=0x2, 0x2)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000480)=0x2, 0x4)
read$alg(r3, &(0x7f0000000300)=""/69, 0x45)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4)
sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28010000070a0103"], 0x128}, 0x1, 0x0, 0x0, 0x200440d5}, 0x4000)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x1, 0x10, 0xfffff000}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)={<r9=>0x0, 0x7, 0x4, [0x4d, 0x2, 0x6a9d, 0x2]}, &(0x7f00000003c0)=0x10)
setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000400)={r9}, 0x8)

262.659359ms ago: executing program 3 (id=2808):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) (async)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r2, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0)

262.343508ms ago: executing program 4 (id=2809):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb190018"], &(0x7f0000000340)=""/250, 0x2b, 0xfa, 0x9}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="680051ce74d2cb579ad1d50000100001df6c47b13249adec5d73a7dd290025bd7000f9dbdf25000000066704dcf4f2f44c9ff567c37977fb8042eff0ecb88cf7ccccb9ede768910f52fb3e3d09efc894568d07e00414857dedaecb6bb2af811baed9b43578bc56704ce39668a64dd0976e983f32dd723f4a91425f7224c1e4f0f187c48bdc7d2d7b4ba2fea8efbf5a67370110c1152056470592bf546d59ff5a010000002636160904f47096e2e3ec1e7b46a5e65d8e", @ANYRES32=r0, @ANYBLOB="158804000301040008001b000000000040001280000001007866726d000000000000028000000100040000000000020001000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

151.378649ms ago: executing program 4 (id=2810):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x2, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000000c0)='GPL\x00', 0x727, 0xa4, &(0x7f00000002c0)=""/164, 0x40f00, 0x30, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xb, 0x4, 0x10}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x5, 0x5, 0xd, 0x6}, {0x2, 0x3, 0x2, 0xa}, {0x0, 0x2, 0xb, 0x5}], 0x10, 0x8}, 0x94)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000780)={r1, &(0x7f0000000600)='syzkaller0\x00', 0x27a200, &(0x7f0000000640)={@align=0x400, {0x0, 0x5, 0x6, 0xe9a8}}, 0x2, &(0x7f0000000680), &(0x7f0000000740)=0x2}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async)
r4 = socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006340), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x20, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x60000000}, 0x4000000) (async)
r9 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x98, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x21c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1ec, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x110, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xdd13}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x54, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xcc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa44a}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe147}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xa4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4000086}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x75}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0xffffffffffffffa3, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x400}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x0, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x0, 0x4, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x0, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x0, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x0, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x0, 0x3, 0xd5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x0, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x0, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER]}]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x30, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x5c}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x30}}, 0x24008080)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r12, 0x0, 0x48f, &(0x7f0000000000)={0x6, @multicast1, 0x4e21, 0x0, 'ovf\x00', 0x0, 0xe00e, 0x79}, 0x2c) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b000005"], 0x0)

0s ago: executing program 0 (id=2811):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000180100002020692500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c001980080002002e"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x48044}, 0x48000)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r4 = socket(0x10, 0x3, 0x0)
tee(r4, r4, 0x2, 0xa)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000023c0)={{r4}, "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"})
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
preadv(r2, &(0x7f0000000040)=[{&(0x7f00000033c0)=""/4103, 0x1007}], 0x1, 0x0, 0x0)
r5 = accept4(r0, 0x0, 0x0, 0x800)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r8, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}]}, 0x3c}}, 0x4)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan3\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10024031}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)={0x338, r9, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xae}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0aa0ac6df45ea86b29b71b4518cbf587c09616f39d9f6111ba9b5985b039c930"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e694d719a9192a1ecee3b6f62150e75f509db6f218ee0c81e8050cfacdba0a51"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_SEC_KEY={0x54, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ae6c4039b7fd296ce7965e9d58c51be8"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "01ba8bae080901eec67f0d68a61d49763d2dae0756bbab59f6cb0f93e97bcd02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_SEC_KEY={0x17c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x83e}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f4faa82219b9dcc11e439ac9b86378ce"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "db011d1d5990d40f9f9a9db7bc68998e"}, @NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1c9376ba71a093155b646980f73fa971"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}]}, @NL802154_ATTR_SEC_KEY={0xac, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "16a19c1ae1ddf3788d16016846f6bdbf"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "772b44bc831852f0adfa4bcae6646194"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d9b26edcabebe5daf00d0df9431714b49283632788837d18e0df50dc8f226f5c"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7a52a24cbd7f2cc07d875c205e90c490"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8d42fc5be5429ac111d6cbeab1a5e2ebfc2165960dcdf4ccbcec1dfdea20f53f"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bce91cf4aebf5ddb655913878e92bc4e05e6c74883a33785b2908d3d2ed6e756"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x338}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0xfffffffffffffce3, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20)
r11 = socket$netlink(0x10, 0x3, 0x4)
writev(r11, &(0x7f0000000280)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000204e0000", 0x58}], 0x1)

kernel console output (not intermixed with test programs):

 304.680386][T12297] netlink: zone id is out of range
[  304.685572][T12297] netlink: zone id is out of range
[  304.691717][T12297] netlink: zone id is out of range
[  304.696933][T12297] netlink: zone id is out of range
[  304.702874][T12297] netlink: zone id is out of range
[  304.708038][T12297] netlink: zone id is out of range
[  304.713605][    C0] syz_tun: tun_net_xmit 162
[  304.764805][T12297] netlink: zone id is out of range
[  304.803577][T12297] netlink: zone id is out of range
[  304.823702][T12297] netlink: zone id is out of range
[  304.846442][T12304] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1642'.
[  305.022786][T12311] netlink: 'syz.3.1642': attribute type 21 has an invalid length.
[  305.038206][T12311] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1642'.
[  305.255459][T12317] netlink: 'syz.2.1646': attribute type 8 has an invalid length.
[  305.263747][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1646'.
[  305.440789][T12325] syzkaller0: entered promiscuous mode
[  305.446588][T12325] syzkaller0: entered allmulticast mode
[  305.750260][    C0] syz_tun: tun_net_xmit 162
[  306.790463][    C0] syz_tun: tun_net_xmit 162
[  307.830198][    C0] syz_tun: tun_net_xmit 162
[  308.479551][T12353] netlink: 'syz.1.1658': attribute type 61 has an invalid length.
[  308.870281][    C0] syz_tun: tun_net_xmit 162
[  308.908294][T12384] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1661'.
[  308.965391][T12384] bridge0: entered allmulticast mode
[  308.990265][T12384] team0: left allmulticast mode
[  308.998631][T12384] geneve1: left allmulticast mode
[  309.011232][T12389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1663'.
[  309.021966][T12384] bridge0: port 1(team0) entered disabled state
[  309.063229][T12395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1663'.
[  309.138433][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'.
[  309.169118][T12389] syz_tun: Device is already in use.
[  309.353798][T12403] syzkaller0: entered promiscuous mode
[  309.359776][T12403] syzkaller0: entered allmulticast mode
[  309.489576][T12413] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1667'.
[  309.504844][T12413] netlink: 'syz.3.1667': attribute type 9 has an invalid length.
[  309.527357][T12413] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1667'.
[  309.911141][    C0] syz_tun: tun_net_xmit 162
[  310.203022][T12444] __nla_validate_parse: 1 callbacks suppressed
[  310.203042][T12444] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1669'.
[  310.901457][T12461] netlink: 'syz.4.1673': attribute type 1 has an invalid length.
[  310.950304][    C0] syz_tun: tun_net_xmit 162
[  311.991758][    C0] syz_tun: tun_net_xmit 162
[  312.925153][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'.
[  312.972997][T12482] mac80211_hwsim hwsim9 »»»»»»: renamed from wlan0
[  313.030151][    C0] syz_tun: tun_net_xmit 162
[  313.100548][T12488] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1682'.
[  313.122414][T12489] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  313.124572][T12488] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  313.175716][T12488] x_tables: duplicate underflow at hook 3
[  313.349846][T12498] syz.4.1685: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  313.404237][T12498] CPU: 1 UID: 0 PID: 12498 Comm: syz.4.1685 Not tainted syzkaller #0 PREEMPT(full) 
[  313.404266][T12498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  313.404277][T12498] Call Trace:
[  313.404285][T12498]  <TASK>
[  313.404293][T12498]  dump_stack_lvl+0xe8/0x150
[  313.404321][T12498]  warn_alloc+0x249/0x340
[  313.404347][T12498]  ? stack_trace_save+0xa9/0x100
[  313.404376][T12498]  ? __pfx_warn_alloc+0x10/0x10
[  313.404410][T12498]  ? kasan_save_track+0x4f/0x80
[  313.404434][T12498]  ? kasan_save_track+0x3e/0x80
[  313.404455][T12498]  ? __kasan_kmalloc+0x93/0xb0
[  313.404478][T12498]  ? __kmalloc_cache_noprof+0x31c/0x660
[  313.404502][T12498]  ? xskq_create+0x56/0x170
[  313.404528][T12498]  ? xsk_setsockopt+0x54c/0x990
[  313.404548][T12498]  ? do_sock_setsockopt+0x17c/0x1b0
[  313.404565][T12498]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  313.404581][T12498]  ? do_syscall_64+0x174/0x580
[  313.404603][T12498]  __vmalloc_node_range_noprof+0x132/0x1750
[  313.404658][T12498]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  313.404689][T12498]  ? __kasan_kmalloc+0x93/0xb0
[  313.404720][T12498]  vmalloc_user_noprof+0xad/0xe0
[  313.404744][T12498]  ? xskq_create+0xbf/0x170
[  313.404768][T12498]  xskq_create+0xbf/0x170
[  313.404796][T12498]  xsk_init_queue+0x8a/0xe0
[  313.404822][T12498]  xsk_setsockopt+0x54c/0x990
[  313.404848][T12498]  ? __pfx_xsk_setsockopt+0x10/0x10
[  313.404871][T12498]  ? __pfx_aa_sk_perm+0x10/0x10
[  313.404899][T12498]  ? aa_sock_opt_perm+0xff/0x1a0
[  313.404930][T12498]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  313.404953][T12498]  ? __pfx_xsk_setsockopt+0x10/0x10
[  313.404978][T12498]  do_sock_setsockopt+0x17c/0x1b0
[  313.405002][T12498]  __x64_sys_setsockopt+0x13d/0x1b0
[  313.405033][T12498]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.405055][T12498]  do_syscall_64+0x174/0x580
[  313.405072][T12498]  ? trace_irq_disable+0x3b/0x140
[  313.405097][T12498]  ? clear_bhb_loop+0x40/0x90
[  313.405119][T12498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.405137][T12498] RIP: 0033:0x7f95b759ce59
[  313.405155][T12498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  313.405171][T12498] RSP: 002b:00007f95b84e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  313.405192][T12498] RAX: ffffffffffffffda RBX: 00007f95b7815fa0 RCX: 00007f95b759ce59
[  313.405205][T12498] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  313.405216][T12498] RBP: 00007f95b7632d6f R08: 0000000000000004 R09: 0000000000000000
[  313.405227][T12498] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  313.405239][T12498] R13: 00007f95b7816038 R14: 00007f95b7815fa0 R15: 00007fff2f6a63f8
[  313.405272][T12498]  </TASK>
[  313.679348][T12498] Mem-Info:
[  313.682890][T12498] active_anon:5516 inactive_anon:0 isolated_anon:0
[  313.682890][T12498]  active_file:3209 inactive_file:40044 isolated_file:0
[  313.682890][T12498]  unevictable:768 dirty:138 writeback:0
[  313.682890][T12498]  slab_reclaimable:10995 slab_unreclaimable:120290
[  313.682890][T12498]  mapped:31430 shmem:1281 pagetables:1181
[  313.682890][T12498]  sec_pagetables:0 bounce:0
[  313.682890][T12498]  kernel_misc_reclaimable:0
[  313.682890][T12498]  free:1266196 free_pcp:11694 free_cma:0
[  313.728640][T12498] Node 0 active_anon:22064kB inactive_anon:0kB active_file:12836kB inactive_file:159968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125720kB dirty:548kB writeback:0kB shmem:3588kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13280kB pagetables:4592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  313.763500][T12498] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  313.798501][T12498] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  313.828625][T12498] lowmem_reserve[]: 0 2492 2493 2493 2493
[  313.837198][T12498] Node 0 DMA32 free:1104360kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22064kB inactive_anon:0kB active_file:12836kB inactive_file:159968kB unevictable:1536kB writepending:548kB zspages:0kB present:3129332kB managed:2552608kB mlocked:0kB bounce:0kB free_pcp:46884kB local_pcp:13460kB free_cma:0kB
[  313.871167][T12498] lowmem_reserve[]: 0 0 0 0 0
[  313.877712][T12498] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  313.907896][T12498] lowmem_reserve[]: 0 0 0 0 0
[  313.913155][T12498] Node 1 Normal free:3945064kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  313.945558][T12498] lowmem_reserve[]: 0 0 0 0 0
[  313.950369][T12498] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  313.964502][T12498] Node 0 DMA32: 2479*4kB (UM) 3095*8kB (UME) 1455*16kB (UME) 516*32kB (UME) 244*64kB (UME) 210*128kB (UME) 88*256kB (UME) 13*512kB (UM) 27*1024kB (UME) 25*2048kB (UME) 215*4096kB (M) = 1105636kB
[  313.984781][T12498] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  313.996793][T12498] Node 1 Normal: 0*4kB 3*8kB (UM) 9*16kB (UM) 8*32kB (UM) 11*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3945064kB
[  314.013869][T12498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  314.029728][T12498] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[  314.039238][T12498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  314.049338][T12498] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  314.070145][T12498] 44549 total pagecache pages
[  314.070166][    C0] syz_tun: tun_net_xmit 162
[  314.074976][T12498] 0 pages in swap cache
[  314.075012][T12498] Free swap  = 124996kB
[  314.116548][T12498] Total swap = 124996kB
[  314.126545][T12498] 2097051 pages RAM
[  314.134594][T12498] 0 pages HighMem/MovableOnly
[  314.147226][T12498] 427116 pages reserved
[  314.157397][T12498] 0 pages cma reserved
[  314.162303][T12505] syzkaller0: entered promiscuous mode
[  314.174290][T12505] syzkaller0: entered allmulticast mode
[  314.229294][T12505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1687'.
[  314.572741][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1692'.
[  314.851710][T12520] syzkaller0: entered promiscuous mode
[  314.857372][T12520] syzkaller0: entered allmulticast mode
[  315.110259][    C0] syz_tun: tun_net_xmit 162
[  316.150182][    C0] syz_tun: tun_net_xmit 162
[  317.194474][    C0] syz_tun: tun_net_xmit 162
[  318.106495][T12543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  318.116186][T12546] syzkaller0: entered promiscuous mode
[  318.121929][T12546] syzkaller0: entered allmulticast mode
[  318.230322][    C0] syz_tun: tun_net_xmit 162
[  318.235450][T12546] tipc: Resetting bearer <eth:syzkaller0>
[  318.323343][T12546] tipc: Disabling bearer <eth:syzkaller0>
[  318.386904][T12569] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1701'.
[  318.409522][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'.
[  318.422515][T12569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1701'.
[  318.431699][T12569] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1701'.
[  318.455938][T12569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1701'.
[  318.481796][T12569] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1701'.
[  318.665434][T12589] netlink: 'syz.2.1708': attribute type 1 has an invalid length.
[  318.707971][T12594] netlink: 'syz.3.1709': attribute type 49 has an invalid length.
[  318.912655][T12597] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1708'.
[  318.963319][T12589] 8021q: adding VLAN 0 to HW filter on device bond7
[  318.975878][T12589] bond6: (slave bond7): making interface the new active one
[  318.984454][T12589] bond6: (slave bond7): Enslaving as an active interface with an up link
[  318.995832][T12608] C: renamed from veth1_to_team
[  319.031025][T12608] netlink: 'syz.4.1710': attribute type 1 has an invalid length.
[  319.075837][T12608] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1710'.
[  319.090016][T12608] net_ratelimit: 375 callbacks suppressed
[  319.090036][T12608] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  319.227296][T12612] dummy0: mtu less than device minimum
[  319.270179][    C0] syz_tun: tun_net_xmit 162
[  319.627058][   T29] audit: type=1800 audit(1780439997.952:16): pid=12630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1716" name="memory.events" dev="tmpfs" ino=1705 res=0 errno=0
[  319.650674][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1716'.
[  319.664376][T12630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1716'.
[  319.696701][T12634] netlink: 'syz.3.1717': attribute type 7 has an invalid length.
[  319.719270][T12634] netlink: 'syz.3.1717': attribute type 8 has an invalid length.
[  319.986010][T12644] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  320.088188][T12655] batman_adv: batadv0: Adding interface: ipvlan2
[  320.113059][T12655] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  320.167205][T12655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.212399][T12655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.241580][T12655] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  320.310131][    C0] syz_tun: tun_net_xmit 162
[  320.409629][T12666] xt_time: invalid argument - start or stop time greater than 23:59:59
[  320.506560][T12670] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  320.525427][T12670] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  320.552192][T12670] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  320.569236][T12670] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  320.658929][T12670] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  320.677645][ T5641] block nbd1: Receive control failed (result -1)
[  320.748941][T12683] netlink: 'syz.4.1728': attribute type 1 has an invalid length.
[  321.350153][    C0] syz_tun: tun_net_xmit 162
[  321.577495][T12710] ipip0: entered promiscuous mode
[  321.879120][T12725] netlink: 'syz.3.1740': attribute type 3 has an invalid length.
[  321.908662][T12726] netlink: 'syz.3.1740': attribute type 3 has an invalid length.
[  322.271662][T12748] netlink: 'syz.2.1744': attribute type 21 has an invalid length.
[  322.393533][    C0] syz_tun: tun_net_xmit 162
[  322.587943][T12762] xt_CT: You must specify a L4 protocol and not use inversions on it
[  322.596974][T12752] syzkaller0: entered promiscuous mode
[  322.597013][T12752] syzkaller0: entered allmulticast mode
[  322.809157][T12775] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.436799][    C0] syz_tun: tun_net_xmit 162
[  324.474915][    C0] syz_tun: tun_net_xmit 162
[  324.998520][T12770] __nla_validate_parse: 20 callbacks suppressed
[  324.998540][T12770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1748'.
[  325.014386][T12770] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1748'.
[  325.024217][T12770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1748'.
[  325.035167][T12773] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1751'.
[  325.092703][T12778] pimreg: entered allmulticast mode
[  325.114347][T12790] batadv_slave_1: Caught tx_queue_len zero misconfig
[  325.510361][    C0] syz_tun: tun_net_xmit 162
[  325.574585][T12817] netlink: 'syz.4.1762': attribute type 5 has an invalid length.
[  325.657532][T12823] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1763'.
[  325.844622][T12835] netlink: 'syz.4.1767': attribute type 1 has an invalid length.
[  325.876508][T12839] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1768'.
[  325.889549][T12839] netlink: 820 bytes leftover after parsing attributes in process `syz.2.1768'.
[  325.899768][T12835] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1767'.
[  325.919202][T12839] netlink: 820 bytes leftover after parsing attributes in process `syz.2.1768'.
[  325.949435][T12839] netlink: 758 bytes leftover after parsing attributes in process `syz.2.1768'.
[  326.051877][T12842] syzkaller1: entered promiscuous mode
[  326.058953][T12842] syzkaller1: entered allmulticast mode
[  326.393717][T12864] netlink: 'syz.0.1776': attribute type 1 has an invalid length.
[  326.494769][T12864] bond7: entered promiscuous mode
[  326.507619][T12868] netlink: zone id is out of range
[  326.517764][T12864] 8021q: adding VLAN 0 to HW filter on device bond7
[  326.525433][T12868] netlink: zone id is out of range
[  326.532218][T12868] netlink: zone id is out of range
[  326.538868][T12866] bridge0: Device is already in use.
[  326.544955][T12868] netlink: zone id is out of range
[  326.550470][    C0] syz_tun: tun_net_xmit 162
[  326.574809][T12868] netlink: zone id is out of range
[  326.580702][T12868] netlink: zone id is out of range
[  326.598026][T12868] netlink: zone id is out of range
[  326.608039][T12868] netlink: zone id is out of range
[  326.621866][T12868] netlink: zone id is out of range
[  326.648316][T12868] netlink: zone id is out of range
[  327.235378][T12891] netlink: 'syz.4.1783': attribute type 21 has an invalid length.
[  327.245474][T12891] netlink: 'syz.4.1783': attribute type 6 has an invalid length.
[  327.255294][T12891] netlink: 'syz.4.1783': attribute type 2 has an invalid length.
[  327.590405][    C0] syz_tun: tun_net_xmit 162
[  328.104346][ T5368] IPVS: starting estimator thread 0...
[  328.133823][T12919] pim6reg: entered allmulticast mode
[  328.146458][T12924] pim6reg: left allmulticast mode
[  328.200034][T12923] IPVS: using max 26 ests per chain, 62400 per kthread
[  328.630265][    C0] syz_tun: tun_net_xmit 162
[  328.703272][T12944] netlink: 'syz.1.1795': attribute type 1 has an invalid length.
[  328.736738][T12944] Bluetooth: hci1: too big key_count value 29096
[  328.769287][T12944] netlink: 'syz.1.1795': attribute type 1 has an invalid length.
[  328.800414][T12948] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  328.813453][T12944] nbd: must specify a size in bytes for the device
[  328.841956][T12944] nbd: must specify an index to disconnect
[  328.885810][T12948] bond4 (unregistering): Released all slaves
[  329.458243][T12970] bridge_slave_1: left allmulticast mode
[  329.474599][T12970] bridge_slave_1: left promiscuous mode
[  329.497362][T12970] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.670347][    C0] syz_tun: tun_net_xmit 162
[  329.783409][T12970] bridge_slave_0: left allmulticast mode
[  329.791210][T12970] bridge_slave_0: left promiscuous mode
[  329.819646][T12970] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.190634][T12977] __nla_validate_parse: 54 callbacks suppressed
[  330.190656][T12977] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1801'.
[  330.272233][T12977] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1801'.
[  330.350759][T12995] netlink: 'syz.1.1805': attribute type 1 has an invalid length.
[  330.484824][T13001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1805'.
[  330.708568][T13001] 8021q: adding VLAN 0 to HW filter on device bond11
[  330.715909][    C0] syz_tun: tun_net_xmit 162
[  330.845716][T13008] IPVS: Scheduler module ip_vs_sip not found
[  330.926613][T12995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.964457][T12995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.017755][T12995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  331.053313][T12995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.068583][T13023] xt_hashlimit: max too large, truncated to 1048576
[  331.081285][T13023] xt_hashlimit: overflow, try lower: 2/0
[  331.237198][T12995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.282869][T12995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.364695][T13034] nbd: couldn't find device at index 0
[  331.593333][T13040] macvlan0: entered promiscuous mode
[  331.637516][T13042] syzkaller0: entered promiscuous mode
[  331.657114][T13042] syzkaller0: entered allmulticast mode
[  331.750302][    C0] syz_tun: tun_net_xmit 162
[  331.959543][T13040] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.966945][T13058] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1820'.
[  331.972763][T13040] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 60650 - 0
[  332.047225][T13045] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  332.061614][T13045] bond9 (unregistering): Released all slaves
[  332.201114][T13040] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.237913][T13040] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 60650 - 0
[  332.441451][T13040] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.457605][T13040] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 60650 - 0
[  332.494069][T13082] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1828'.
[  332.535273][ T5774] IPVS: starting estimator thread 0...
[  332.574369][T13040] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.601010][T13040] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 60650 - 0
[  332.650006][T13085] IPVS: using max 28 ests per chain, 67200 per kthread
[  332.672630][T13090] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  332.790337][    C0] syz_tun: tun_net_xmit 162
[  332.978515][T13097] bond0: (slave dummy0): Releasing backup interface
[  333.189808][T13103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1831'.
[  333.287988][ T7058] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 60650 - 0
[  333.305132][ T7058] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  333.364220][ T7058] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 60650 - 0
[  333.373145][ T7058] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  333.385241][T13111] net_ratelimit: 377 callbacks suppressed
[  333.385269][T13111] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.423258][ T7052] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 60650 - 0
[  333.435265][ T7052] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  333.457917][ T7052] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 60650 - 0
[  333.466915][ T7052] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  333.499119][T13040] macvlan0: left promiscuous mode
[  333.550887][T13113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1834'.
[  333.562089][T13113] netlink: 'syz.3.1834': attribute type 12 has an invalid length.
[  333.680501][T13122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1835'.
[  333.830191][    C0] syz_tun: tun_net_xmit 162
[  334.068988][T13139] 8021q: VLANs not supported on ip_vti0
[  334.100531][T13139] netlink: 'syz.4.1840': attribute type 7 has an invalid length.
[  334.127686][T13139] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1840'.
[  334.205855][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1842'.
[  334.456669][T13147] veth7: entered allmulticast mode
[  334.475458][T13147] bond8: (slave veth7): Enslaving as an active interface with an up link
[  334.544525][T13149] bond8 (unregistering): (slave veth7): Releasing backup interface
[  334.614981][T13149] bond8 (unregistering): Released all slaves
[  334.870201][    C0] syz_tun: tun_net_xmit 162
[  335.373614][T13180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1852'.
[  335.459160][T13180] bond12: entered promiscuous mode
[  335.465066][T13180] 8021q: adding VLAN 0 to HW filter on device bond12
[  335.635072][T13181] 8021q: adding VLAN 0 to HW filter on device bond13
[  335.689594][T13181] bond13: entered promiscuous mode
[  335.703363][T13181] bond12: (slave bond13): Enslaving as an active interface with an up link
[  335.723935][T13195] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1855'.
[  335.740881][T13195] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1855'.
[  335.757208][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1850'.
[  335.910153][    C0] syz_tun: tun_net_xmit 162
[  336.283612][T13221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1865'.
[  336.335501][T13223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'.
[  336.510500][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1869'.
[  336.546356][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1869'.
[  336.701106][T13245] Can't find ip_set type bitmap:ip
[  336.758176][T13258] sctp: [Deprecated]: syz.1.1873 (pid 13258) Use of struct sctp_assoc_value in delayed_ack socket option.
[  336.758176][T13258] Use struct sctp_sack_info instead
[  336.796822][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1873'.
[  336.884989][T13263] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1876'.
[  336.950290][    C0] syz_tun: tun_net_xmit 162
[  337.366638][T13290] vlan4: entered promiscuous mode
[  337.552597][T13303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.716171][T13294] ip6tnl0: Caught tx_queue_len zero misconfig
[  337.731607][T13294] syzkaller1: entered promiscuous mode
[  337.742197][T13294] syzkaller1: entered allmulticast mode
[  337.990278][    C0] syz_tun: tun_net_xmit 162
[  338.758763][T13374] netlink: zone id is out of range
[  338.778974][T13374] netlink: zone id is out of range
[  338.810333][T13374] netlink: zone id is out of range
[  338.836004][T13374] netlink: zone id is out of range
[  338.869758][T13374] netlink: zone id is out of range
[  338.885218][T13374] netlink: zone id is out of range
[  338.900282][T13374] netlink: zone id is out of range
[  338.912394][T13374] netlink: zone id is out of range
[  338.943312][T13374] netlink: zone id is out of range
[  338.964255][T13374] netlink: zone id is out of range
[  339.037549][    C0] syz_tun: tun_net_xmit 162
[  339.386230][T13408] bond8: option min_links: invalid value (18446744073709551612)
[  339.394264][T13408] bond8: option min_links: allowed values 0 - 2147483647
[  339.434464][T13408] bond8 (unregistering): Released all slaves
[  340.070278][    C0] syz_tun: tun_net_xmit 162
[  340.619113][T13474] __nla_validate_parse: 8 callbacks suppressed
[  340.619134][T13474] netlink: 758 bytes leftover after parsing attributes in process `syz.2.1938'.
[  340.763621][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1937'.
[  341.110164][    C0] syz_tun: tun_net_xmit 162
[  341.657430][T13508] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1947'.
[  341.678643][T13508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1947'.
[  341.985323][T13517] sctp: [Deprecated]: syz.0.1949 (pid 13517) Use of int in max_burst socket option.
[  341.985323][T13517] Use struct sctp_assoc_value instead
[  342.056248][T13519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1950'.
[  342.150167][    C0] syz_tun: tun_net_xmit 162
[  343.190223][    C0] syz_tun: tun_net_xmit 162
[  343.346459][T13561] netlink: 'syz.1.1958': attribute type 1 has an invalid length.
[  343.700306][T13567] syzkaller0: entered promiscuous mode
[  343.705837][T13567] syzkaller0: entered allmulticast mode
[  344.041017][T13574] netlink: 'syz.0.1963': attribute type 1 has an invalid length.
[  344.113987][T13576] bond8: (slave geneve2): making interface the new active one
[  344.122940][T13576] bond8: (slave geneve2): Enslaving as an active interface with an up link
[  344.139686][T13574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1963'.
[  344.162342][ T7058] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  344.195797][ T7058] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  344.230200][    C0] syz_tun: tun_net_xmit 162
[  344.249701][T13574] 8021q: adding VLAN 0 to HW filter on device bond8
[  344.315074][T13579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1964'.
[  344.360259][ T7058] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  344.381783][ T7058] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  344.775023][T13590] net_ratelimit: 1146 callbacks suppressed
[  344.775046][T13590] netlink: zone id is out of range
[  344.830390][T13590] netlink: zone id is out of range
[  344.841927][T13590] netlink: zone id is out of range
[  344.860772][T13590] netlink: zone id is out of range
[  344.887854][T13590] netlink: zone id is out of range
[  344.901177][T13590] netlink: zone id is out of range
[  344.920304][T13590] netlink: zone id is out of range
[  344.939422][T13590] netlink: zone id is out of range
[  344.955498][T13590] netlink: zone id is out of range
[  344.971207][T13590] netlink: zone id is out of range
[  345.025933][T13596] netlink: 'syz.2.1968': attribute type 1 has an invalid length.
[  345.162503][T13596] 8021q: adding VLAN 0 to HW filter on device bond8
[  345.214518][T13596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1968'.
[  345.270154][    C0] syz_tun: tun_net_xmit 162
[  345.286267][T13600] bond8: (slave veth7): Enslaving as an active interface with a down link
[  345.312413][T13601] bond8: (slave dummy0): making interface the new active one
[  345.322367][T13601] dummy0: entered promiscuous mode
[  345.328222][T13601] bond8: (slave dummy0): Enslaving as an active interface with an up link
[  345.856913][T13617] syzkaller0: entered promiscuous mode
[  345.875484][T13617] syzkaller0: entered allmulticast mode
[  346.318250][    C0] syz_tun: tun_net_xmit 162
[  347.012693][T13645] sctp: [Deprecated]: syz.3.1978 (pid 13645) Use of int in maxseg socket option.
[  347.012693][T13645] Use struct sctp_assoc_value instead
[  347.356255][    C0] syz_tun: tun_net_xmit 162
[  348.396274][    C0] syz_tun: tun_net_xmit 162
[  348.741187][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1979'.
[  348.774412][T13647] ip6tnl1: entered allmulticast mode
[  348.868109][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1985'.
[  348.880385][T13659] syzkaller1: entered promiscuous mode
[  348.886733][T13659] syzkaller1: entered allmulticast mode
[  348.897644][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1985'.
[  348.955579][T13666] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.1986'.
[  348.975646][T13662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1985'.
[  349.044283][T13666] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.1986'.
[  349.158249][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1989'.
[  349.304505][T13687] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1992'.
[  349.329432][T13688] bridge6: entered promiscuous mode
[  349.334924][T13688] bridge6: entered allmulticast mode
[  349.376868][T13692] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1994'.
[  349.430313][    C0] syz_tun: tun_net_xmit 162
[  349.444473][T13696] sctp: [Deprecated]: syz.2.1995 (pid 13696) Use of struct sctp_assoc_value in delayed_ack socket option.
[  349.444473][T13696] Use struct sctp_sack_info instead
[  350.188692][T13709] netlink: 424 bytes leftover after parsing attributes in process `syz.3.1996'.
[  350.228824][T13709] netlink: 'syz.3.1996': attribute type 1 has an invalid length.
[  350.470136][    C0] syz_tun: tun_net_xmit 162
[  350.662069][T13740] xt_hashlimit: size too large, truncated to 1048576
[  350.781784][T13747] netlink: 'syz.1.2006': attribute type 1 has an invalid length.
[  350.791558][T13747] net_ratelimit: 376 callbacks suppressed
[  350.791577][T13747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.807432][T13747] siw: device registration error -23
[  350.821656][T13749] siw: device registration error -23
[  350.853795][T13748] vlan2: entered promiscuous mode
[  350.866990][T13748] bridge0: entered promiscuous mode
[  351.455150][ T1015] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  351.488817][ T1015] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  351.510280][    C0] syz_tun: tun_net_xmit 162
[  351.523774][ T1015] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  351.548790][ T1015] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  352.079114][T13794] bond14: Removing last arp target with arp_interval on
[  352.188487][T13794] bond15: Removing last arp target with arp_interval on
[  352.300208][T13794] bond16: Removing last arp target with arp_interval on
[  352.371560][T13794] bond17: Removing last arp target with arp_interval on
[  352.463475][T13794] bond18: Removing last arp target with arp_interval on
[  352.550221][    C0] syz_tun: tun_net_xmit 162
[  352.586116][T13794] bond19: Removing last arp target with arp_interval on
[  352.762140][T13794] bond20: Removing last arp target with arp_interval on
[  353.433451][T13879] ip6tnl4: entered allmulticast mode
[  353.465813][ T7061] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  353.487615][ T7061] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  353.497821][ T5774] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  353.590281][    C0] syz_tun: tun_net_xmit 162
[  353.710267][ T5774] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  353.732322][T13888] gre2: entered promiscuous mode
[  353.786053][T13896] __nla_validate_parse: 7 callbacks suppressed
[  353.786088][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'.
[  353.940192][ T5774] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  354.137076][T13915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2051'.
[  354.275592][T13919] netlink: 'syz.0.2051': attribute type 1 has an invalid length.
[  354.298492][T13919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2051'.
[  354.487785][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2053'.
[  354.630280][    C0] syz_tun: tun_net_xmit 162
[  354.763492][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'.
[  354.809723][ T7058] tipc: Subscription rejected, illegal request
[  354.895585][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2059'.
[  354.918237][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2059'.
[  355.051492][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'.
[  355.083884][T13961] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  355.117559][T13961] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  355.135788][T13961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2061'.
[  355.170562][T13965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2064'.
[  355.670339][    C0] syz_tun: tun_net_xmit 162
[  355.935417][T13993] FAULT_INJECTION: forcing a failure.
[  355.935417][T13993] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  355.950362][T13993] CPU: 0 UID: 0 PID: 13993 Comm: syz.1.2072 Not tainted syzkaller #0 PREEMPT(full) 
[  355.950390][T13993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  355.950401][T13993] Call Trace:
[  355.950409][T13993]  <TASK>
[  355.950417][T13993]  dump_stack_lvl+0xe8/0x150
[  355.950447][T13993]  should_fail_ex+0x412/0x560
[  355.950474][T13993]  _copy_from_user+0x2d/0xb0
[  355.950499][T13993]  ___sys_sendmsg+0x1c6/0x360
[  355.950521][T13993]  ? __lock_acquire+0x6b5/0x2cf0
[  355.950548][T13993]  ? __pfx____sys_sendmsg+0x10/0x10
[  355.950609][T13993]  ? __fget_files+0x2a/0x420
[  355.950632][T13993]  ? __fget_files+0x3a0/0x420
[  355.950667][T13993]  __x64_sys_sendmsg+0x1bd/0x2a0
[  355.950692][T13993]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  355.950725][T13993]  ? __pfx_ksys_write+0x10/0x10
[  355.950763][T13993]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.950785][T13993]  do_syscall_64+0x174/0x580
[  355.950804][T13993]  ? trace_irq_disable+0x3b/0x140
[  355.950832][T13993]  ? clear_bhb_loop+0x40/0x90
[  355.950856][T13993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.950875][T13993] RIP: 0033:0x7f8026b9ce59
[  355.950894][T13993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  355.950910][T13993] RSP: 002b:00007f8024df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  355.950930][T13993] RAX: ffffffffffffffda RBX: 00007f8026e15fa0 RCX: 00007f8026b9ce59
[  355.950944][T13993] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000006
[  355.950955][T13993] RBP: 00007f8024df6090 R08: 0000000000000000 R09: 0000000000000000
[  355.950967][T13993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.950978][T13993] R13: 00007f8026e16038 R14: 00007f8026e15fa0 R15: 00007ffda29777f8
[  355.951011][T13993]  </TASK>
[  356.604132][ T7061] dummy0: left promiscuous mode
[  356.710659][    C0] syz_tun: tun_net_xmit 162
[  357.101361][T14034] FAULT_INJECTION: forcing a failure.
[  357.101361][T14034] name failslab, interval 1, probability 0, space 0, times 1
[  357.114857][T14034] CPU: 0 UID: 0 PID: 14034 Comm: syz.0.2084 Not tainted syzkaller #0 PREEMPT(full) 
[  357.114885][T14034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  357.114897][T14034] Call Trace:
[  357.114905][T14034]  <TASK>
[  357.114913][T14034]  dump_stack_lvl+0xe8/0x150
[  357.114942][T14034]  should_fail_ex+0x412/0x560
[  357.114970][T14034]  should_failslab+0xa8/0x100
[  357.115003][T14034]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  357.115031][T14034]  ? __alloc_skb+0x186/0x7d0
[  357.115049][T14034]  ? __alloc_skb+0x1d0/0x7d0
[  357.115065][T14034]  ? __local_bh_enable_ip+0xd0/0x130
[  357.115089][T14034]  __alloc_skb+0x1d0/0x7d0
[  357.115115][T14034]  netlink_sendmsg+0x5d4/0xb40
[  357.115148][T14034]  ? __pfx_netlink_sendmsg+0x10/0x10
[  357.115175][T14034]  ? aa_sock_msg_perm+0xf1/0x1b0
[  357.115205][T14034]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  357.115235][T14034]  ____sys_sendmsg+0x972/0x9f0
[  357.115256][T14034]  ? __might_fault+0xaf/0x130
[  357.115287][T14034]  ? __pfx_____sys_sendmsg+0x10/0x10
[  357.115319][T14034]  ? import_iovec+0x73/0xa0
[  357.115346][T14034]  ___sys_sendmsg+0x2a5/0x360
[  357.115367][T14034]  ? __lock_acquire+0x6b5/0x2cf0
[  357.115394][T14034]  ? __pfx____sys_sendmsg+0x10/0x10
[  357.115455][T14034]  ? __fget_files+0x2a/0x420
[  357.115478][T14034]  ? __fget_files+0x3a0/0x420
[  357.115513][T14034]  __x64_sys_sendmsg+0x1bd/0x2a0
[  357.115539][T14034]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  357.115572][T14034]  ? __pfx_ksys_write+0x10/0x10
[  357.115609][T14034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.115631][T14034]  do_syscall_64+0x174/0x580
[  357.115651][T14034]  ? trace_irq_disable+0x3b/0x140
[  357.115684][T14034]  ? clear_bhb_loop+0x40/0x90
[  357.115708][T14034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.115727][T14034] RIP: 0033:0x7f65fd79ce59
[  357.115747][T14034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  357.115763][T14034] RSP: 002b:00007f65fe732028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  357.115785][T14034] RAX: ffffffffffffffda RBX: 00007f65fda15fa0 RCX: 00007f65fd79ce59
[  357.115799][T14034] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000006
[  357.115811][T14034] RBP: 00007f65fe732090 R08: 0000000000000000 R09: 0000000000000000
[  357.115821][T14034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  357.115832][T14034] R13: 00007f65fda16038 R14: 00007f65fda15fa0 R15: 00007ffd38bf9718
[  357.115863][T14034]  </TASK>
[  357.750174][    C0] syz_tun: tun_net_xmit 162
[  357.830172][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  358.361864][T14076] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  358.385897][T14076] gretap1: entered allmulticast mode
[  358.537520][T14078] syzkaller0: entered promiscuous mode
[  358.552314][T14078] syzkaller0: entered allmulticast mode
[  358.616450][T14090] netlink: 'syz.1.2101': attribute type 11 has an invalid length.
[  358.790600][    C0] syz_tun: tun_net_xmit 162
[  358.826325][T14097] __nla_validate_parse: 11 callbacks suppressed
[  358.826347][T14097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2101'.
[  359.353124][   T29] audit: type=1800 audit(1780440037.682:17): pid=14116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2106" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=2259 res=0 errno=0
[  359.834447][    C0] syz_tun: tun_net_xmit 162
[  360.876478][    C0] syz_tun: tun_net_xmit 162
[  361.910141][    C0] syz_tun: tun_net_xmit 162
[  361.979516][T14134] netlink: 'syz.0.2110': attribute type 14 has an invalid length.
[  362.200724][T14148] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2115'.
[  362.416544][T14160] netlink: 'syz.0.2118': attribute type 2 has an invalid length.
[  362.433845][T14160] netlink: 'syz.0.2118': attribute type 8 has an invalid length.
[  362.442396][T14160] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2118'.
[  362.447617][T14155] netlink: 'syz.4.2117': attribute type 11 has an invalid length.
[  362.485665][T14163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2119'.
[  362.503988][T14155] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.2117'.
[  362.509379][T14163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2119'.
[  362.772698][T14170] geneve4: entered promiscuous mode
[  362.795026][ T7058] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 44564 - 0
[  362.830338][ T7058] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 44564 - 0
[  362.886695][ T7058] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 44564 - 0
[  362.920072][ T7058] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 44564 - 0
[  362.942563][T14184] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2124'.
[  362.951951][    C0] syz_tun: tun_net_xmit 162
[  362.958008][T14187] FAULT_INJECTION: forcing a failure.
[  362.958008][T14187] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  362.967901][T14191] erspan0: left allmulticast mode
[  362.976712][T14191] erspan0: left promiscuous mode
[  362.977332][T14187] CPU: 0 UID: 0 PID: 14187 Comm: syz.4.2125 Not tainted syzkaller #0 PREEMPT(full) 
[  362.977354][T14187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  362.977365][T14187] Call Trace:
[  362.977372][T14187]  <TASK>
[  362.977380][T14187]  dump_stack_lvl+0xe8/0x150
[  362.977405][T14187]  should_fail_ex+0x412/0x560
[  362.977430][T14187]  _copy_to_user+0x31/0xb0
[  362.977452][T14187]  simple_read_from_buffer+0xe1/0x170
[  362.977479][T14187]  proc_fail_nth_read+0x1bb/0x230
[  362.977505][T14187]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  362.977529][T14187]  ? rw_verify_area+0x2a6/0x4d0
[  362.977552][T14187]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  362.977575][T14187]  vfs_read+0x20c/0xa70
[  362.977602][T14187]  ? __pfx___mutex_lock+0x10/0x10
[  362.977623][T14187]  ? __pfx_vfs_read+0x10/0x10
[  362.977648][T14187]  ? __fget_files+0x2a/0x420
[  362.977673][T14187]  ? __fget_files+0x3a0/0x420
[  362.977692][T14187]  ? __fget_files+0x2a/0x420
[  362.977720][T14187]  ksys_read+0x150/0x270
[  362.977745][T14187]  ? __pfx_ksys_read+0x10/0x10
[  362.977776][T14187]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.977795][T14187]  do_syscall_64+0x174/0x580
[  362.977812][T14187]  ? trace_irq_disable+0x3b/0x140
[  362.977836][T14187]  ? clear_bhb_loop+0x40/0x90
[  362.977857][T14187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.977874][T14187] RIP: 0033:0x7f95b755d68e
[  362.977891][T14187] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  362.977904][T14187] RSP: 002b:00007f95b84e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  362.977923][T14187] RAX: ffffffffffffffda RBX: 00007f95b84e96c0 RCX: 00007f95b755d68e
[  362.977935][T14187] RDX: 000000000000000f RSI: 00007f95b84e90a0 RDI: 0000000000000007
[  362.977946][T14187] RBP: 00007f95b84e9090 R08: 0000000000000000 R09: 0000000000000000
[  362.977956][T14187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  362.977966][T14187] R13: 00007f95b7816038 R14: 00007f95b7815fa0 R15: 00007fff2f6a63f8
[  362.977996][T14187]  </TASK>
[  363.198766][T14191] bridge0: port 1(erspan0) entered disabled state
[  363.251952][T14191] bond8: (slave dummy0): Releasing active interface
[  363.295442][T14191] bridge_slave_1: left allmulticast mode
[  363.314013][T14191] bridge_slave_1: left promiscuous mode
[  363.320275][T14191] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.339544][T14191] team0: Port device team_slave_0 removed
[  363.352866][T14191] team0: Port device team_slave_1 removed
[  363.362640][T14191] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  363.383454][T14190] tunl0: Caught tx_queue_len zero misconfig
[  363.402450][T14207] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  363.598555][T14215] tc_dump_action: action bad kind
[  363.646058][T14220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2131'.
[  363.661962][T14213] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2129'.
[  363.676243][T14213] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2129'.
[  363.990191][    C0] syz_tun: tun_net_xmit 162
[  364.046287][T14244] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2137'.
[  364.462227][T14257] netlink: 'syz.4.2139': attribute type 1 has an invalid length.
[  364.586700][T14267] syz_tun: tun_net_xmit 42
[  364.598867][T14257] 8021q: adding VLAN 0 to HW filter on device bond9
[  364.620924][T14267] syz_tun: tun_net_xmit 42
[  364.641044][T14257] netlink: 'syz.4.2139': attribute type 10 has an invalid length.
[  364.652748][T14267] syz_tun: tun_net_xmit 42
[  364.670753][T14267] syz_tun: tun_net_xmit 42
[  364.695320][T14267] syz_tun: tun_net_xmit 42
[  364.701449][T14257] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2139'.
[  364.739623][T14267] syz_tun: tun_net_xmit 42
[  364.756904][T14267] syz_tun: tun_net_xmit 42
[  364.763855][T14267] syz_tun: tun_net_xmit 42
[  364.776317][T14267] syz_tun: tun_net_xmit 42
[  364.782896][T14266] bond9: (slave veth9): Enslaving as a backup interface with a down link
[  364.799488][T14267] syz_tun: tun_net_xmit 42
[  364.805330][T14267] syz_tun: tun_net_xmit 42
[  364.817308][T14267] syz_tun: tun_net_xmit 42
[  364.824505][T14267] syz_tun: tun_net_xmit 42
[  364.840507][T14267] syz_tun: tun_net_xmit 42
[  364.848128][T14267] syz_tun: tun_net_xmit 42
[  364.868399][T14267] syz_tun: tun_net_xmit 42
[  364.902264][T14267] syz_tun: tun_net_xmit 42
[  364.933660][T14267] syz_tun: tun_net_xmit 42
[  364.959593][T14267] syz_tun: tun_net_xmit 42
[  364.988810][T14267] syz_tun: tun_net_xmit 42
[  365.006590][T14267] syz_tun: tun_net_xmit 42
[  365.027826][T14267] syz_tun: tun_net_xmit 42
[  365.049287][T14267] syz_tun: tun_net_xmit 42
[  365.071776][T14267] syz_tun: tun_net_xmit 42
[  365.093526][T14267] syz_tun: tun_net_xmit 42
[  365.117425][T14267] syz_tun: tun_net_xmit 42
[  365.144975][T14267] syz_tun: tun_net_xmit 42
[  365.171029][T14267] syz_tun: tun_net_xmit 42
[  365.197132][T14267] syz_tun: tun_net_xmit 42
[  365.225748][T14267] syz_tun: tun_net_xmit 42
[  365.255556][T14267] syz_tun: tun_net_xmit 42
[  365.301219][T14267] syz_tun: tun_net_xmit 42
[  365.313419][T14267] syz_tun: tun_net_xmit 42
[  365.329365][T14267] syz_tun: tun_net_xmit 42
[  365.374405][T14267] syz_tun: tun_net_xmit 42
[  365.379542][T14267] syz_tun: tun_net_xmit 42
[  365.385417][T14267] syz_tun: tun_net_xmit 42
[  365.395471][T14267] syz_tun: tun_net_xmit 42
[  365.412065][T14267] syz_tun: tun_net_xmit 42
[  365.431992][T14295] GUP no longer grows the stack in syz.4.2147 (14295): 200000003000-20000000a000 (200000001000)
[  365.446909][T14267] syz_tun: tun_net_xmit 42
[  365.477834][T14267] syz_tun: tun_net_xmit 42
[  365.495752][T14295] CPU: 0 UID: 0 PID: 14295 Comm: syz.4.2147 Not tainted syzkaller #0 PREEMPT(full) 
[  365.495784][T14295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  365.495795][T14295] Call Trace:
[  365.495804][T14295]  <TASK>
[  365.495813][T14295]  dump_stack_lvl+0xe8/0x150
[  365.495843][T14295]  __get_user_pages+0x2378/0x2730
[  365.495895][T14295]  ? __gup_longterm_locked+0xc4e/0x1630
[  365.495920][T14295]  ? down_read_killable+0x1bb/0x340
[  365.495961][T14295]  __gup_longterm_locked+0xdcf/0x1630
[  365.495991][T14295]  ? lock_acquire+0x106/0x350
[  365.496041][T14295]  gup_fast_fallback+0x1d84/0x20d0
[  365.496103][T14295]  ? __pfx_gup_fast_fallback+0x10/0x10
[  365.496131][T14295]  ? is_valid_gup_args+0x11f/0x200
[  365.496157][T14295]  ? get_user_pages_fast+0x4d/0xb0
[  365.496185][T14295]  __iov_iter_get_pages_alloc+0x370/0xa10
[  365.496214][T14295]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  365.496245][T14295]  iov_iter_get_pages2+0x5e/0xa0
[  365.496270][T14295]  __se_sys_vmsplice+0x7c7/0x1620
[  365.496316][T14295]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  365.496342][T14295]  ? __pfx_futex_wait+0x10/0x10
[  365.496438][T14295]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.496462][T14295]  do_syscall_64+0x174/0x580
[  365.496480][T14295]  ? trace_irq_disable+0x3b/0x140
[  365.496507][T14295]  ? clear_bhb_loop+0x40/0x90
[  365.496533][T14295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.496551][T14295] RIP: 0033:0x7f95b759ce59
[  365.496571][T14295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  365.496588][T14295] RSP: 002b:00007f95b84e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  365.496611][T14295] RAX: ffffffffffffffda RBX: 00007f95b7815fa0 RCX: 00007f95b759ce59
[  365.496625][T14295] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007
[  365.496637][T14295] RBP: 00007f95b7632d6f R08: 0000000000000000 R09: 0000000000000000
[  365.496649][T14295] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  365.496660][T14295] R13: 00007f95b7816038 R14: 00007f95b7815fa0 R15: 00007fff2f6a63f8
[  365.496695][T14295]  </TASK>
[  365.506901][T14267] syz_tun: tun_net_xmit 42
[  365.738980][T14267] syz_tun: tun_net_xmit 42
[  365.758220][T14267] syz_tun: tun_net_xmit 42
[  365.783570][T14301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2148'.
[  365.809483][T14267] syz_tun: tun_net_xmit 42
[  365.825603][T14267] syz_tun: tun_net_xmit 42
[  365.840544][T14267] syz_tun: tun_net_xmit 42
[  365.848865][T14267] syz_tun: tun_net_xmit 42
[  365.861662][T14267] syz_tun: tun_net_xmit 42
[  365.881469][T14267] syz_tun: tun_net_xmit 42
[  365.886802][T14267] syz_tun: tun_net_xmit 42
[  365.892779][T14267] syz_tun: tun_net_xmit 42
[  365.897917][T14267] syz_tun: tun_net_xmit 42
[  365.903551][T14267] syz_tun: tun_net_xmit 42
[  365.908567][T14267] syz_tun: tun_net_xmit 42
[  365.914400][T14267] syz_tun: tun_net_xmit 42
[  365.919417][T14267] syz_tun: tun_net_xmit 42
[  365.941994][T14267] syz_tun: tun_net_xmit 42
[  365.959408][T14267] syz_tun: tun_net_xmit 42
[  365.973904][T14267] syz_tun: tun_net_xmit 42
[  365.986327][T14267] syz_tun: tun_net_xmit 42
[  366.002081][T14267] syz_tun: tun_net_xmit 42
[  366.023214][T14267] syz_tun: tun_net_xmit 42
[  366.041674][T14267] syz_tun: tun_net_xmit 42
[  366.058598][T14267] syz_tun: tun_net_xmit 42
[  366.070125][    C0] syz_tun: tun_net_xmit 162
[  366.077745][T14267] syz_tun: tun_net_xmit 42
[  366.095543][T14267] syz_tun: tun_net_xmit 42
[  366.098578][T14320] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2150'.
[  366.109055][T14267] syz_tun: tun_net_xmit 42
[  366.126737][T14267] syz_tun: tun_net_xmit 42
[  366.133685][T14267] syz_tun: tun_net_xmit 42
[  366.151365][T14267] syz_tun: tun_net_xmit 42
[  366.170640][T14267] syz_tun: tun_net_xmit 42
[  366.177503][T14267] syz_tun: tun_net_xmit 42
[  366.190787][T14267] syz_tun: tun_net_xmit 42
[  366.209674][T14267] syz_tun: tun_net_xmit 42
[  366.227058][T14267] syz_tun: tun_net_xmit 42
[  366.256942][T14267] syz_tun: tun_net_xmit 42
[  366.266500][T14329] nbd: must specify a size in bytes for the device
[  366.273965][T14267] syz_tun: tun_net_xmit 42
[  366.296833][T14267] syz_tun: tun_net_xmit 42
[  366.322424][T14267] syz_tun: tun_net_xmit 42
[  366.346723][T14267] syz_tun: tun_net_xmit 42
[  366.370183][T14267] syz_tun: tun_net_xmit 42
[  366.386979][T14331] netlink: 'syz.2.2153': attribute type 9 has an invalid length.
[  366.387692][T14267] syz_tun: tun_net_xmit 42
[  366.440924][T14267] syz_tun: tun_net_xmit 42
[  366.458802][T14267] syz_tun: tun_net_xmit 42
[  366.464000][T14267] syz_tun: tun_net_xmit 42
[  366.469001][T14267] syz_tun: tun_net_xmit 42
[  366.496509][T14267] syz_tun: tun_net_xmit 42
[  366.526550][T14267] syz_tun: tun_net_xmit 42
[  366.550106][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  366.551448][T14267] syz_tun: tun_net_xmit 42
[  366.579838][T14267] syz_tun: tun_net_xmit 42
[  366.588135][T14267] syz_tun: tun_net_xmit 42
[  366.598292][T14267] syz_tun: tun_net_xmit 42
[  366.607818][T14267] syz_tun: tun_net_xmit 42
[  366.617925][T14267] syz_tun: tun_net_xmit 42
[  366.626988][T14267] syz_tun: tun_net_xmit 42
[  366.635949][T14267] syz_tun: tun_net_xmit 42
[  366.643667][T14267] syz_tun: tun_net_xmit 42
[  366.657982][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2155'.
[  366.658908][T14267] syz_tun: tun_net_xmit 42
[  366.673568][T14267] syz_tun: tun_net_xmit 42
[  366.679689][T14267] syz_tun: tun_net_xmit 42
[  366.697723][T14267] syz_tun: tun_net_xmit 42
[  366.713164][T14267] syz_tun: tun_net_xmit 42
[  366.728447][T14267] syz_tun: tun_net_xmit 42
[  366.734124][T14267] syz_tun: tun_net_xmit 42
[  366.748706][T14267] syz_tun: tun_net_xmit 42
[  366.763490][T14267] syz_tun: tun_net_xmit 42
[  366.778521][T14267] syz_tun: tun_net_xmit 42
[  366.794066][T14267] syz_tun: tun_net_xmit 42
[  366.811532][T14267] syz_tun: tun_net_xmit 42
[  366.829763][T14267] syz_tun: tun_net_xmit 42
[  366.836648][T14267] syz_tun: tun_net_xmit 42
[  366.853243][T14267] syz_tun: tun_net_xmit 42
[  366.866611][T14267] syz_tun: tun_net_xmit 42
[  366.882435][T14267] syz_tun: tun_net_xmit 42
[  366.907926][T14267] syz_tun: tun_net_xmit 42
[  366.914729][T14267] syz_tun: tun_net_xmit 42
[  366.940463][T14267] syz_tun: tun_net_xmit 42
[  366.947241][T14267] syz_tun: tun_net_xmit 42
[  366.960466][T14267] syz_tun: tun_net_xmit 42
[  366.973712][T14267] syz_tun: tun_net_xmit 42
[  367.001646][T14267] syz_tun: tun_net_xmit 42
[  367.027941][T14267] syz_tun: tun_net_xmit 42
[  367.071085][T14267] syz_tun: tun_net_xmit 42
[  367.076623][T14267] syz_tun: tun_net_xmit 42
[  367.108813][T14267] syz_tun: tun_net_xmit 42
[  367.113672][    C0] syz_tun: tun_net_xmit 162
[  367.127861][T14267] syz_tun: tun_net_xmit 42
[  367.140552][T14267] syz_tun: tun_net_xmit 42
[  367.148968][T14267] syz_tun: tun_net_xmit 42
[  367.170818][T14267] syz_tun: tun_net_xmit 42
[  367.178965][T14267] syz_tun: tun_net_xmit 42
[  367.192980][T14267] syz_tun: tun_net_xmit 42
[  367.206328][T14267] syz_tun: tun_net_xmit 42
[  367.222696][T14267] syz_tun: tun_net_xmit 42
[  367.235323][T14356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2157'.
[  367.245611][T14267] syz_tun: tun_net_xmit 42
[  367.255735][T14267] syz_tun: tun_net_xmit 42
[  367.271258][T14267] syz_tun: tun_net_xmit 42
[  367.293020][T14267] syz_tun: tun_net_xmit 42
[  367.309482][T14267] syz_tun: tun_net_xmit 42
[  367.320756][T14267] syz_tun: tun_net_xmit 42
[  367.332894][T14267] syz_tun: tun_net_xmit 42
[  367.349734][T14267] syz_tun: tun_net_xmit 42
[  367.355631][T14267] syz_tun: tun_net_xmit 42
[  367.370914][T14267] syz_tun: tun_net_xmit 42
[  367.381838][T14267] syz_tun: tun_net_xmit 42
[  367.389539][T14267] syz_tun: tun_net_xmit 42
[  367.395283][T14267] syz_tun: tun_net_xmit 42
[  367.401024][T14267] syz_tun: tun_net_xmit 42
[  367.406139][T14267] syz_tun: tun_net_xmit 42
[  367.417837][T14267] syz_tun: tun_net_xmit 42
[  367.439144][T14267] syz_tun: tun_net_xmit 42
[  367.463532][T14267] syz_tun: tun_net_xmit 42
[  367.474301][T14267] syz_tun: tun_net_xmit 42
[  367.493134][T14267] syz_tun: tun_net_xmit 42
[  367.501183][T14267] syz_tun: tun_net_xmit 42
[  367.535619][T14267] syz_tun: tun_net_xmit 42
[  367.571435][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2158'.
[  367.615405][T14267] syz_tun: tun_net_xmit 42
[  367.639701][T14267] syz_tun: tun_net_xmit 42
[  367.682586][T14267] syz_tun: tun_net_xmit 42
[  367.703436][T14267] syz_tun: tun_net_xmit 42
[  367.728399][T14267] syz_tun: tun_net_xmit 42
[  367.746902][T14375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2159'.
[  367.749809][T14267] syz_tun: tun_net_xmit 42
[  367.809532][T14267] syz_tun: tun_net_xmit 42
[  367.835710][T14267] syz_tun: tun_net_xmit 42
[  367.863288][T14267] syz_tun: tun_net_xmit 42
[  367.878047][T14267] syz_tun: tun_net_xmit 42
[  367.895343][T14267] syz_tun: tun_net_xmit 42
[  367.911434][T14267] syz_tun: tun_net_xmit 42
[  367.927388][T14267] syz_tun: tun_net_xmit 42
[  367.942745][T14267] syz_tun: tun_net_xmit 42
[  367.952160][T14267] syz_tun: tun_net_xmit 42
[  367.968796][T14267] syz_tun: tun_net_xmit 42
[  367.974275][T14267] syz_tun: tun_net_xmit 42
[  367.984402][T14267] syz_tun: tun_net_xmit 42
[  368.002228][T14267] syz_tun: tun_net_xmit 42
[  368.011973][T14267] syz_tun: tun_net_xmit 42
[  368.058008][T14267] syz_tun: tun_net_xmit 42
[  368.091651][T14267] syz_tun: tun_net_xmit 42
[  368.115574][T14267] syz_tun: tun_net_xmit 42
[  368.134842][T14267] syz_tun: tun_net_xmit 42
[  368.150153][    C0] syz_tun: tun_net_xmit 162
[  368.154966][T14267] syz_tun: tun_net_xmit 42
[  368.169245][T14388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2162'.
[  368.190170][T14267] syz_tun: tun_net_xmit 42
[  368.203886][T14267] syz_tun: tun_net_xmit 42
[  368.228054][T14267] syz_tun: tun_net_xmit 42
[  368.246032][T14267] syz_tun: tun_net_xmit 42
[  368.264740][T14267] syz_tun: tun_net_xmit 42
[  368.281276][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2163'.
[  368.290625][T14267] syz_tun: tun_net_xmit 42
[  368.309693][T14267] syz_tun: tun_net_xmit 42
[  368.315895][T14267] syz_tun: tun_net_xmit 42
[  368.326306][T14267] syz_tun: tun_net_xmit 42
[  368.328700][T14401] xfrm0: entered promiscuous mode
[  368.336596][T14267] syz_tun: tun_net_xmit 42
[  368.343387][T14401] team0: Device xfrm0 is of different type
[  368.354405][T14267] syz_tun: tun_net_xmit 42
[  368.359927][T14267] syz_tun: tun_net_xmit 42
[  368.365652][T14267] syz_tun: tun_net_xmit 42
[  368.376254][T14267] syz_tun: tun_net_xmit 42
[  368.385365][T14267] syz_tun: tun_net_xmit 42
[  368.394063][T14267] syz_tun: tun_net_xmit 42
[  368.404962][T14267] syz_tun: tun_net_xmit 42
[  368.421470][T14267] syz_tun: tun_net_xmit 42
[  368.426660][T14267] syz_tun: tun_net_xmit 42
[  368.438729][T14405] sctp: [Deprecated]: syz.2.2165 (pid 14405) Use of int in max_burst socket option.
[  368.438729][T14405] Use struct sctp_assoc_value instead
[  368.443263][T14267] syz_tun: tun_net_xmit 42
[  368.486562][T14267] syz_tun: tun_net_xmit 42
[  368.519735][T14267] syz_tun: tun_net_xmit 42
[  368.546302][T14267] syz_tun: tun_net_xmit 42
[  368.565783][T14267] syz_tun: tun_net_xmit 42
[  368.585381][T14267] syz_tun: tun_net_xmit 42
[  368.603361][T14267] syz_tun: tun_net_xmit 42
[  368.614568][T14267] syz_tun: tun_net_xmit 42
[  368.625739][T14267] syz_tun: tun_net_xmit 42
[  368.639585][T14267] syz_tun: tun_net_xmit 42
[  368.654748][T14267] syz_tun: tun_net_xmit 42
[  368.673317][T14267] syz_tun: tun_net_xmit 42
[  368.691694][T14267] syz_tun: tun_net_xmit 42
[  368.704133][T14267] syz_tun: tun_net_xmit 42
[  368.715292][T14267] syz_tun: tun_net_xmit 42
[  368.730350][T14267] syz_tun: tun_net_xmit 42
[  368.746186][T14267] syz_tun: tun_net_xmit 42
[  368.757546][T14267] syz_tun: tun_net_xmit 42
[  368.771428][T14267] syz_tun: tun_net_xmit 42
[  368.783097][T14267] syz_tun: tun_net_xmit 42
[  368.792859][T14421] netlink: zone id is out of range
[  368.798863][T14267] syz_tun: tun_net_xmit 42
[  368.803881][T14421] netlink: zone id is out of range
[  368.811471][T14421] netlink: zone id is out of range
[  368.814860][T14267] syz_tun: tun_net_xmit 42
[  368.828383][T14267] syz_tun: tun_net_xmit 42
[  368.834915][T14421] netlink: zone id is out of range
[  368.838564][T14267] syz_tun: tun_net_xmit 42
[  368.848643][T14267] syz_tun: tun_net_xmit 42
[  368.853687][T14267] syz_tun: tun_net_xmit 42
[  368.864750][T14421] netlink: zone id is out of range
[  368.877405][T14267] syz_tun: tun_net_xmit 42
[  368.892130][T14267] syz_tun: tun_net_xmit 42
[  368.904437][T14267] syz_tun: tun_net_xmit 42
[  368.915425][T14267] syz_tun: tun_net_xmit 42
[  368.919539][T14421] netlink: zone id is out of range
[  368.928412][T14267] syz_tun: tun_net_xmit 42
[  368.944622][T14421] netlink: zone id is out of range
[  368.945659][T14267] syz_tun: tun_net_xmit 42
[  368.961010][T14421] netlink: zone id is out of range
[  368.966546][T14421] netlink: zone id is out of range
[  368.974191][T14267] syz_tun: tun_net_xmit 42
[  368.982000][T14421] netlink: zone id is out of range
[  368.992556][T14267] syz_tun: tun_net_xmit 42
[  369.012497][T14267] syz_tun: tun_net_xmit 42
[  369.026153][T14267] syz_tun: tun_net_xmit 42
[  369.040484][T14267] syz_tun: tun_net_xmit 42
[  369.047769][T14267] syz_tun: tun_net_xmit 42
[  369.071507][T14267] syz_tun: tun_net_xmit 42
[  369.076282][T14267] syz_tun: tun_net_xmit 42
[  369.092208][T14267] syz_tun: tun_net_xmit 42
[  369.108499][T14267] syz_tun: tun_net_xmit 42
[  369.130823][T14267] syz_tun: tun_net_xmit 42
[  369.141751][T14267] syz_tun: tun_net_xmit 42
[  369.151240][T14267] syz_tun: tun_net_xmit 42
[  369.162093][T14267] syz_tun: tun_net_xmit 42
[  369.178905][T14267] syz_tun: tun_net_xmit 42
[  369.190142][    C0] syz_tun: tun_net_xmit 162
[  369.197640][T14267] syz_tun: tun_net_xmit 42
[  369.220814][T14267] syz_tun: tun_net_xmit 42
[  369.229424][T14267] syz_tun: tun_net_xmit 42
[  369.248163][T14267] syz_tun: tun_net_xmit 42
[  369.259759][T14267] syz_tun: tun_net_xmit 42
[  369.274462][T14267] syz_tun: tun_net_xmit 42
[  369.293896][T14267] syz_tun: tun_net_xmit 42
[  369.307738][T14267] syz_tun: tun_net_xmit 42
[  369.330458][T14267] syz_tun: tun_net_xmit 42
[  369.344823][T14267] syz_tun: tun_net_xmit 42
[  369.365440][T14442] vlan2: entered allmulticast mode
[  369.378327][T14447] __nla_validate_parse: 1 callbacks suppressed
[  369.378348][T14447] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2171'.
[  369.381631][T14442] dummy0: entered allmulticast mode
[  369.597631][T14449] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2174'.
[  369.669835][T14463] bridge0: port 2(vlan4) entered blocking state
[  369.685187][T14463] bridge0: port 2(vlan4) entered disabled state
[  369.700210][T14463] vlan4: entered allmulticast mode
[  369.705746][T14463] geneve0: entered allmulticast mode
[  369.714348][T14463] vlan4: entered promiscuous mode
[  369.719627][T14463] geneve0: entered promiscuous mode
[  369.835527][T14473] 8021q: VLANs not supported on ip6gre0
[  370.230211][    C0] syz_tun: tun_net_xmit 162
[  371.187578][T14517] sctp: [Deprecated]: syz.3.2192 (pid 14517) Use of int in max_burst socket option.
[  371.187578][T14517] Use struct sctp_assoc_value instead
[  371.270225][    C0] syz_tun: tun_net_xmit 162
[  371.419621][T14534] netlink: 'syz.4.2197': attribute type 1 has an invalid length.
[  371.432107][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2196'.
[  371.508808][T14534] bond10: entered promiscuous mode
[  371.515021][T14534] 8021q: adding VLAN 0 to HW filter on device bond10
[  371.516978][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2197'.
[  371.620853][T14534] vlan3: entered allmulticast mode
[  371.634577][T14534] bond10: entered allmulticast mode
[  371.645942][T14547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2200'.
[  371.760997][T14539] bond10: (slave bridge7): making interface the new active one
[  371.769569][T14553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2201'.
[  371.796428][T14539] bridge7: entered promiscuous mode
[  371.809557][T14539] bridge7: entered allmulticast mode
[  371.826677][T14539] bond10: (slave bridge7): Enslaving as an active interface with an up link
[  371.908028][T14543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2200'.
[  371.943876][T14543] nbd: nbd64 already in use
[  372.283838][T14580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2206'.
[  372.310236][    C0] syz_tun: tun_net_xmit 162
[  372.347902][T14131] udevd[14131]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  372.642344][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2204'.
[  372.785327][T14598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2208'.
[  373.350314][    C0] syz_tun: tun_net_xmit 162
[  374.390198][    C0] syz_tun: tun_net_xmit 162
[  375.430219][    C0] syz_tun: tun_net_xmit 162
[  376.024418][T14618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  376.470175][    C0] syz_tun: tun_net_xmit 162
[  377.510218][    C0] syz_tun: tun_net_xmit 162
[  378.550234][    C0] syz_tun: tun_net_xmit 162
[  379.591693][    C0] syz_tun: tun_net_xmit 162
[  380.630451][    C0] syz_tun: tun_net_xmit 162
[  381.670234][    C0] syz_tun: tun_net_xmit 162
[  382.710340][    C0] syz_tun: tun_net_xmit 162
[  383.750242][    C0] syz_tun: tun_net_xmit 162
[  383.830786][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  384.790234][    C0] syz_tun: tun_net_xmit 162
[  385.830141][    C0] syz_tun: tun_net_xmit 162
[  386.870204][    C0] syz_tun: tun_net_xmit 162
[  387.910208][    C0] syz_tun: tun_net_xmit 162
[  388.950925][    C0] syz_tun: tun_net_xmit 162
[  389.990292][    C0] syz_tun: tun_net_xmit 162
[  391.030206][    C0] syz_tun: tun_net_xmit 162
[  391.866510][T14652] __nla_validate_parse: 4 callbacks suppressed
[  391.866531][T14652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2218'.
[  391.889350][T14647] unsupported nlmsg_type 40
[  391.981211][T14658] net_ratelimit: 1534 callbacks suppressed
[  391.981243][T14658] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  392.070140][    C0] syz_tun: tun_net_xmit 162
[  392.095558][T14658] netlink: 'syz.4.2221': attribute type 3 has an invalid length.
[  392.127213][T14658] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2221'.
[  392.439497][T14679] netlink: zone id is out of range
[  392.445093][T14679] netlink: zone id is out of range
[  392.451631][T14679] netlink: zone id is out of range
[  392.458202][T14679] netlink: zone id is out of range
[  392.473214][T14679] netlink: zone id is out of range
[  392.482828][T14679] netlink: zone id is out of range
[  392.493499][T14679] netlink: zone id is out of range
[  392.506869][T14679] netlink: zone id is out of range
[  392.517086][T14679] netlink: zone id is out of range
[  392.542730][ T7052] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  392.580712][ T7052] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  392.615024][ T7052] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  392.822419][T14696] netlink: 'syz.1.2229': attribute type 21 has an invalid length.
[  392.835594][T14696] netlink: 'syz.1.2229': attribute type 21 has an invalid length.
[  393.044254][ T7052] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  393.053876][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2229'.
[  393.068786][T14702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2229'.
[  393.091582][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2229'.
[  393.110170][    C0] syz_tun: tun_net_xmit 162
[  393.141977][T14702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2229'.
[  393.156809][T14710] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  393.175361][T14710] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  393.493300][T14728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2236'.
[  393.768904][T14732] x_tables: duplicate underflow at hook 1
[  393.877244][T14736] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2241'.
[  393.945330][T14739] rdma_rxe: rxe_newlink: failed to add syzkaller0
[  393.964816][T14743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2242'.
[  394.052374][T14745] nicvf0: tun_chr_ioctl cmd 2150131490
[  394.094940][T14745] nicvf0: tun_chr_ioctl cmd 21731
[  394.150204][    C0] syz_tun: tun_net_xmit 162
[  394.306122][T14761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2248'.
[  394.903148][T14788] tipc: Started in network mode
[  394.918387][T14788] tipc: Node identity 080211000001, cluster identity 4711
[  394.929589][T14788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  394.981560][T14788] tipc: Resetting bearer <eth:syzkaller0>
[  395.190284][    C0] syz_tun: tun_net_xmit 162
[  395.406572][T14804] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  395.438365][T14804] batadv_slave_1: entered promiscuous mode
[  395.621884][T14820] syzkaller0: entered promiscuous mode
[  395.627722][T14820] syzkaller0: entered allmulticast mode
[  395.658489][T14820] tc action pedit offset 136 out of bounds
[  396.086956][   T24] tipc: Node number set to 134418688
[  396.231702][    C0] syz_tun: tun_net_xmit 162
[  396.432675][T14862] netlink: 'syz.1.2276': attribute type 21 has an invalid length.
[  396.519179][T14866] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode
[  396.534793][T14866] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode
[  396.979225][T14897] sctp: [Deprecated]: syz.1.2284 (pid 14897) Use of int in maxseg socket option.
[  396.979225][T14897] Use struct sctp_assoc_value instead
[  397.270278][    C0] syz_tun: tun_net_xmit 162
[  398.310197][    C0] syz_tun: tun_net_xmit 162
[  399.355657][    C0] syz_tun: tun_net_xmit 162
[  399.740784][T14926] __nla_validate_parse: 12 callbacks suppressed
[  399.740806][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2290'.
[  400.017956][T14931] netlink: 'syz.4.2292': attribute type 3 has an invalid length.
[  400.248525][T14936] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2294'.
[  400.280805][T14936] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2294'.
[  400.391634][    C0] syz_tun: tun_net_xmit 162
[  400.537648][T14957] netlink: 'syz.0.2300': attribute type 21 has an invalid length.
[  400.545810][T14957] netlink: 'syz.0.2300': attribute type 21 has an invalid length.
[  400.568618][T14959] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2297'.
[  400.568651][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2297'.
[  400.608355][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2300'.
[  400.622123][T14962] netlink: 'syz.3.2301': attribute type 13 has an invalid length.
[  400.628186][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2300'.
[  400.645105][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2300'.
[  400.661896][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2300'.
[  400.727964][T14967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2302'.
[  400.804955][T14971] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  400.826582][T14971] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  400.850068][T14974] netlink: 'syz.0.2305': attribute type 12 has an invalid length.
[  401.431853][    C0] syz_tun: tun_net_xmit 162
[  401.505244][T15014] netlink: 'syz.3.2313': attribute type 1 has an invalid length.
[  401.726552][T15014] bond5: entered promiscuous mode
[  401.749300][T15014] 8021q: adding VLAN 0 to HW filter on device bond5
[  402.002545][T15032] ip6gre3: entered promiscuous mode
[  402.008043][T15032] ip6gre3: entered allmulticast mode
[  402.340364][T15052] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  402.470199][    C0] syz_tun: tun_net_xmit 162
[  402.487210][T15055] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  402.500449][T15055] net_ratelimit: 379 callbacks suppressed
[  402.500468][T15055] syzkaller0: mtu less than device minimum
[  402.626039][T15059] IPv6: addrconf: prefix option has invalid lifetime
[  402.666429][T15064] xt_NFQUEUE: number of total queues is 0
[  402.828605][T15070] lo: Caught tx_queue_len zero misconfig
[  403.088224][T15083] block nbd3: Unsupported socket: should be TCP or UNIX.
[  403.312325][T15090] netlink: 'syz.1.2333': attribute type 1 has an invalid length.
[  403.339188][T15090] netlink: 'syz.1.2333': attribute type 2 has an invalid length.
[  403.465639][T15099] netlink: 'syz.4.2338': attribute type 1 has an invalid length.
[  403.510128][    C0] syz_tun: tun_net_xmit 162
[  403.611493][T15107] FAULT_INJECTION: forcing a failure.
[  403.611493][T15107] name failslab, interval 1, probability 0, space 0, times 0
[  403.633627][T15107] CPU: 1 UID: 0 PID: 15107 Comm: syz.2.2340 Not tainted syzkaller #0 PREEMPT(full) 
[  403.633656][T15107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  403.633667][T15107] Call Trace:
[  403.633675][T15107]  <TASK>
[  403.633684][T15107]  dump_stack_lvl+0xe8/0x150
[  403.633714][T15107]  should_fail_ex+0x412/0x560
[  403.633743][T15107]  should_failslab+0xa8/0x100
[  403.633762][T15107]  __kmalloc_cache_noprof+0x88/0x660
[  403.633789][T15107]  ? dev_ethtool+0x132/0x1ae0
[  403.633821][T15107]  dev_ethtool+0x132/0x1ae0
[  403.633852][T15107]  ? kasan_quarantine_put+0xbb/0x1f0
[  403.633881][T15107]  ? __pfx_dev_ethtool+0x10/0x10
[  403.633905][T15107]  ? dev_load+0x21/0x1f0
[  403.633934][T15107]  ? dev_load+0x21/0x1f0
[  403.633955][T15107]  ? dev_load+0x21/0x1f0
[  403.633975][T15107]  dev_ioctl+0x392/0x1150
[  403.633997][T15107]  sock_do_ioctl+0x23e/0x320
[  403.634096][T15107]  ? __pfx_sock_do_ioctl+0x10/0x10
[  403.634118][T15107]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  403.634159][T15107]  sock_ioctl+0x5c6/0x7f0
[  403.634187][T15107]  ? __pfx_sock_ioctl+0x10/0x10
[  403.634213][T15107]  ? __fget_files+0x2a/0x420
[  403.634235][T15107]  ? __fget_files+0x3a0/0x420
[  403.634258][T15107]  ? __fget_files+0x2a/0x420
[  403.634283][T15107]  ? bpf_lsm_file_ioctl+0x9/0x20
[  403.634311][T15107]  ? __pfx_sock_ioctl+0x10/0x10
[  403.634336][T15107]  __se_sys_ioctl+0xfc/0x170
[  403.634365][T15107]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.634387][T15107]  do_syscall_64+0x174/0x580
[  403.634406][T15107]  ? trace_irq_disable+0x3b/0x140
[  403.634434][T15107]  ? clear_bhb_loop+0x40/0x90
[  403.634459][T15107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.634479][T15107] RIP: 0033:0x7fc6e079ce59
[  403.634498][T15107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  403.634515][T15107] RSP: 002b:00007fc6e15f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  403.634537][T15107] RAX: ffffffffffffffda RBX: 00007fc6e0a15fa0 RCX: 00007fc6e079ce59
[  403.634551][T15107] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000004
[  403.634563][T15107] RBP: 00007fc6e15f1090 R08: 0000000000000000 R09: 0000000000000000
[  403.634575][T15107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  403.634587][T15107] R13: 00007fc6e0a16038 R14: 00007fc6e0a15fa0 R15: 00007ffd3ca97548
[  403.634620][T15107]  </TASK>
[  404.453355][T15148] FAULT_INJECTION: forcing a failure.
[  404.453355][T15148] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  404.510012][T15148] CPU: 1 UID: 0 PID: 15148 Comm: syz.0.2353 Not tainted syzkaller #0 PREEMPT(full) 
[  404.510041][T15148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  404.510051][T15148] Call Trace:
[  404.510059][T15148]  <TASK>
[  404.510067][T15148]  dump_stack_lvl+0xe8/0x150
[  404.510095][T15148]  should_fail_ex+0x412/0x560
[  404.510123][T15148]  _copy_to_user+0x31/0xb0
[  404.510149][T15148]  ethtool_get_one_feature+0x216/0x290
[  404.510175][T15148]  ? __pfx_ethtool_get_one_feature+0x10/0x10
[  404.510193][T15148]  ? full_name_hash+0x92/0xe0
[  404.510225][T15148]  dev_ethtool+0x1574/0x1ae0
[  404.510276][T15148]  ? __pfx_dev_ethtool+0x10/0x10
[  404.510299][T15148]  ? dev_load+0x21/0x1f0
[  404.510335][T15148]  ? dev_load+0x21/0x1f0
[  404.510356][T15148]  dev_ioctl+0x392/0x1150
[  404.510380][T15148]  sock_do_ioctl+0x23e/0x320
[  404.510410][T15148]  ? __pfx_sock_do_ioctl+0x10/0x10
[  404.510431][T15148]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  404.510474][T15148]  sock_ioctl+0x5c6/0x7f0
[  404.510503][T15148]  ? __pfx_sock_ioctl+0x10/0x10
[  404.510528][T15148]  ? __fget_files+0x2a/0x420
[  404.510551][T15148]  ? __fget_files+0x3a0/0x420
[  404.510574][T15148]  ? __fget_files+0x2a/0x420
[  404.510601][T15148]  ? bpf_lsm_file_ioctl+0x9/0x20
[  404.510630][T15148]  ? __pfx_sock_ioctl+0x10/0x10
[  404.510654][T15148]  __se_sys_ioctl+0xfc/0x170
[  404.510688][T15148]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.510709][T15148]  do_syscall_64+0x174/0x580
[  404.510728][T15148]  ? trace_irq_disable+0x3b/0x140
[  404.510755][T15148]  ? clear_bhb_loop+0x40/0x90
[  404.510780][T15148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.510799][T15148] RIP: 0033:0x7f65fd79ce59
[  404.510818][T15148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  404.510834][T15148] RSP: 002b:00007f65fe732028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  404.510856][T15148] RAX: ffffffffffffffda RBX: 00007f65fda15fa0 RCX: 00007f65fd79ce59
[  404.510870][T15148] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000004
[  404.510883][T15148] RBP: 00007f65fe732090 R08: 0000000000000000 R09: 0000000000000000
[  404.510895][T15148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  404.510906][T15148] R13: 00007f65fda16038 R14: 00007f65fda15fa0 R15: 00007ffd38bf9718
[  404.510939][T15148]  </TASK>
[  404.550214][    C0] syz_tun: tun_net_xmit 162
[  404.809642][T15121] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  404.818214][T15121] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  404.929625][T15165] __nla_validate_parse: 17 callbacks suppressed
[  404.929645][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2359'.
[  405.590101][    C0] syz_tun: tun_net_xmit 162
[  405.598903][T15203] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2368'.
[  405.609334][T15200] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2369'.
[  405.881934][T15211] syz.4.2370: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  405.918206][T15213] netlink: 'syz.2.2372': attribute type 16 has an invalid length.
[  405.927543][T15213] netlink: 'syz.2.2372': attribute type 17 has an invalid length.
[  405.928065][T15211] CPU: 0 UID: 0 PID: 15211 Comm: syz.4.2370 Not tainted syzkaller #0 PREEMPT(full) 
[  405.928087][T15211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  405.928099][T15211] Call Trace:
[  405.928106][T15211]  <TASK>
[  405.928114][T15211]  dump_stack_lvl+0xe8/0x150
[  405.928141][T15211]  warn_alloc+0x249/0x340
[  405.928168][T15211]  ? stack_trace_save+0xa9/0x100
[  405.928197][T15211]  ? __pfx_warn_alloc+0x10/0x10
[  405.928230][T15211]  ? kasan_save_track+0x4f/0x80
[  405.928252][T15211]  ? kasan_save_track+0x3e/0x80
[  405.928273][T15211]  ? __kasan_kmalloc+0x93/0xb0
[  405.928294][T15211]  ? __kmalloc_cache_noprof+0x31c/0x660
[  405.928317][T15211]  ? xskq_create+0x56/0x170
[  405.928339][T15211]  ? xsk_setsockopt+0x54c/0x990
[  405.928360][T15211]  ? do_sock_setsockopt+0x17c/0x1b0
[  405.928376][T15211]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  405.928393][T15211]  ? do_syscall_64+0x174/0x580
[  405.928414][T15211]  __vmalloc_node_range_noprof+0x132/0x1750
[  405.928469][T15211]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  405.928499][T15211]  ? __kasan_kmalloc+0x93/0xb0
[  405.928529][T15211]  vmalloc_user_noprof+0xad/0xe0
[  405.928553][T15211]  ? xskq_create+0xbf/0x170
[  405.928577][T15211]  xskq_create+0xbf/0x170
[  405.928603][T15211]  xsk_init_queue+0x8a/0xe0
[  405.928629][T15211]  xsk_setsockopt+0x54c/0x990
[  405.928655][T15211]  ? __pfx_xsk_setsockopt+0x10/0x10
[  405.928678][T15211]  ? __pfx_aa_sk_perm+0x10/0x10
[  405.928705][T15211]  ? aa_sock_opt_perm+0xff/0x1a0
[  405.928733][T15211]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  405.928754][T15211]  ? __pfx_xsk_setsockopt+0x10/0x10
[  405.928779][T15211]  do_sock_setsockopt+0x17c/0x1b0
[  405.928802][T15211]  __x64_sys_setsockopt+0x13d/0x1b0
[  405.928823][T15211]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.928843][T15211]  do_syscall_64+0x174/0x580
[  405.928859][T15211]  ? trace_irq_disable+0x3b/0x140
[  405.928884][T15211]  ? clear_bhb_loop+0x40/0x90
[  405.928906][T15211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.928922][T15211] RIP: 0033:0x7f95b759ce59
[  405.928939][T15211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  405.928954][T15211] RSP: 002b:00007f95b84a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  405.928989][T15211] RAX: ffffffffffffffda RBX: 00007f95b7816180 RCX: 00007f95b759ce59
[  405.929008][T15211] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  405.929019][T15211] RBP: 00007f95b7632d6f R08: 0000000000000004 R09: 0000000000000000
[  405.929029][T15211] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  405.929039][T15211] R13: 00007f95b7816218 R14: 00007f95b7816180 R15: 00007fff2f6a63f8
[  405.929069][T15211]  </TASK>
[  405.929075][T15211] Mem-Info:
[  405.976692][T15213] 8021q: adding VLAN 0 to HW filter on device team0
[  405.991813][T15211] active_anon:6740 inactive_anon:0 isolated_anon:0
[  405.991813][T15211]  active_file:3209 inactive_file:40079 isolated_file:0
[  405.991813][T15211]  unevictable:768 dirty:175 writeback:0
[  405.991813][T15211]  slab_reclaimable:11487 slab_unreclaimable:129404
[  405.991813][T15211]  mapped:29396 shmem:1283 pagetables:1252
[  405.991813][T15211]  sec_pagetables:0 bounce:0
[  405.991813][T15211]  kernel_misc_reclaimable:0
[  405.991813][T15211]  free:1285867 free_pcp:10545 free_cma:0
[  406.022617][T15213] 8021q: adding VLAN 0 to HW filter on device 
60ªX¹¦À
[  406.075613][T15211] Node 0 active_anon:27048kB inactive_anon:0kB active_file:12836kB inactive_file:160108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121600kB dirty:700kB writeback:0kB shmem:3592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14176kB pagetables:4972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  406.324016][T15211] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  406.370260][T15211] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  406.402118][T15211] lowmem_reserve[]: 0 2492 2493 2493 2493
[  406.408107][T15211] Node 0 DMA32 free:1179084kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27148kB inactive_anon:0kB active_file:12836kB inactive_file:160108kB unevictable:1536kB writepending:700kB zspages:0kB present:3129332kB managed:2552608kB mlocked:0kB bounce:0kB free_pcp:39796kB local_pcp:17900kB free_cma:0kB
[  406.453597][T15213] bridge_slave_1: entered promiscuous mode
[  406.457172][T15211] lowmem_reserve[]: 0 0 0 0 0
[  406.492886][T15211] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  406.525745][T15213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  406.547377][T15211] lowmem_reserve[]: 0 0 0 0 0
[  406.552677][T15213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  406.580720][T15213] veth1_macvtap: left promiscuous mode
[  406.598152][T15213] veth0_macvtap: left promiscuous mode
[  406.606499][T15213] veth0_macvtap: entered promiscuous mode
[  406.607743][T15211] Node 1 
[  406.616777][T15213] veth1_macvtap: entered promiscuous mode
[  406.617890][T15211] Normal free:3945060kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  406.629212][T15213] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  406.657312][    C0] syz_tun: tun_net_xmit 162
[  406.739585][T15211] lowmem_reserve[]: 0 0 0 0 0
[  406.756500][T15211] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  406.825520][   T80] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.830034][T15211] Node 0 DMA32: 5349*4kB (UM) 3359*8kB (UM) 1789*16kB (UME) 356*32kB (UM) 432*64kB (UME) 338*128kB (UME) 223*256kB (UM) 123*512kB (UM) 67*1024kB (UM) 34*2048kB (UM) 186*4096kB (UM) = 1179356kB
[  406.834926][   T80] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.900848][T15211] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  406.916600][   T80] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.937780][   T80] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.947111][ T5774] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  406.957064][T15211] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 9*16kB (UM) 8*32kB (UM) 11*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3945060kB
[  407.001128][T15211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  407.017410][T15211] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  407.040377][T15211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  407.060572][T15211] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  407.080372][T15211] 47101 total pagecache pages
[  407.090497][T15211] 0 pages in swap cache
[  407.100415][T15211] Free swap  = 124996kB
[  407.117752][T15211] Total swap = 124996kB
[  407.133079][T15211] 2097051 pages RAM
[  407.147008][T15211] 0 pages HighMem/MovableOnly
[  407.161319][T15211] 427116 pages reserved
[  407.174989][T15211] 0 pages cma reserved
[  407.300640][ T5774] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  407.476316][T15247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2381'.
[  407.486030][T15248] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2380'.
[  407.632481][T15251] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  407.670139][    C0] syz_tun: tun_net_xmit 162
[  407.675827][ T7061] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  407.905202][T15269] FAULT_INJECTION: forcing a failure.
[  407.905202][T15269] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  407.918990][T15269] CPU: 1 UID: 0 PID: 15269 Comm: syz.1.2387 Not tainted syzkaller #0 PREEMPT(full) 
[  407.919017][T15269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  407.919029][T15269] Call Trace:
[  407.919036][T15269]  <TASK>
[  407.919050][T15269]  dump_stack_lvl+0xe8/0x150
[  407.919089][T15269]  should_fail_ex+0x412/0x560
[  407.919116][T15269]  _copy_to_user+0x31/0xb0
[  407.919143][T15269]  simple_read_from_buffer+0xe1/0x170
[  407.919174][T15269]  proc_fail_nth_read+0x1bb/0x230
[  407.919202][T15269]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  407.919232][T15269]  ? rw_verify_area+0x2a6/0x4d0
[  407.919257][T15269]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  407.919284][T15269]  vfs_read+0x20c/0xa70
[  407.919315][T15269]  ? __pfx___mutex_lock+0x10/0x10
[  407.919337][T15269]  ? __pfx_vfs_read+0x10/0x10
[  407.919364][T15269]  ? __fget_files+0x2a/0x420
[  407.919392][T15269]  ? __fget_files+0x3a0/0x420
[  407.919413][T15269]  ? __fget_files+0x2a/0x420
[  407.919446][T15269]  ksys_read+0x150/0x270
[  407.919476][T15269]  ? __pfx_ksys_read+0x10/0x10
[  407.919502][T15269]  ? __pfx_sock_ioctl+0x10/0x10
[  407.919534][T15269]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.919555][T15269]  do_syscall_64+0x174/0x580
[  407.919575][T15269]  ? trace_irq_disable+0x3b/0x140
[  407.919603][T15269]  ? clear_bhb_loop+0x40/0x90
[  407.919628][T15269]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.919647][T15269] RIP: 0033:0x7f8026b5d68e
[  407.919667][T15269] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  407.919683][T15269] RSP: 002b:00007f8024df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  407.919705][T15269] RAX: ffffffffffffffda RBX: 00007f8024df66c0 RCX: 00007f8026b5d68e
[  407.919718][T15269] RDX: 000000000000000f RSI: 00007f8024df60a0 RDI: 0000000000000003
[  407.919729][T15269] RBP: 00007f8024df6090 R08: 0000000000000000 R09: 0000000000000000
[  407.919740][T15269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  407.919751][T15269] R13: 00007f8026e16038 R14: 00007f8026e15fa0 R15: 00007ffda29777f8
[  407.919785][T15269]  </TASK>
[  408.145819][T15273] sctp: [Deprecated]: syz.2.2386 (pid 15273) Use of int in maxseg socket option.
[  408.145819][T15273] Use struct sctp_assoc_value instead
[  408.207174][T15277] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2388'.
[  408.228808][T15275] netlink: 840 bytes leftover after parsing attributes in process `syz.3.2389'.
[  408.441792][T15285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2392'.
[  408.505587][T15291] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2394'.
[  408.710093][    C0] syz_tun: tun_net_xmit 162
[  408.716569][ T1336] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  408.729337][ T1336] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  408.882200][T15308] netlink: 'syz.2.2397': attribute type 6 has an invalid length.
[  408.905577][T15308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2397'.
[  409.110341][  T808] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  409.529614][T15331] bond10: option primary_reselect: invalid value (6)
[  409.549381][T15331] bond10 (unregistering): Released all slaves
[  409.750054][    C0] syz_tun: tun_net_xmit 162
[  410.280315][T15365] netlink: 'syz.2.2412': attribute type 9 has an invalid length.
[  410.309400][T15365] netlink: 'syz.2.2412': attribute type 6 has an invalid length.
[  410.333907][T15365] netlink: 'syz.2.2412': attribute type 7 has an invalid length.
[  410.355798][T15365] netlink: 'syz.2.2412': attribute type 8 has an invalid length.
[  410.560194][T15367] __nla_validate_parse: 3 callbacks suppressed
[  410.560216][T15367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2413'.
[  410.790130][    C0] syz_tun: tun_net_xmit 162
[  410.961659][T15374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2418'.
[  411.002669][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2419'.
[  411.055565][T15380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2420'.
[  411.212303][T15383] vlan4: entered promiscuous mode
[  411.332777][T15388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2422'.
[  411.586017][T15393] netlink: 'syz.4.2424': attribute type 1 has an invalid length.
[  411.592359][T15396] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2425'.
[  411.830134][    C0] syz_tun: tun_net_xmit 162
[  412.203424][T15426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2433'.
[  412.274083][T15429] syzkaller1: entered promiscuous mode
[  412.317710][T15429] syzkaller1: entered allmulticast mode
[  412.355920][T15433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2434'.
[  412.393567][T15432] bond0: (slave ip6tnl0): refused to change device type
[  412.710105][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  412.870059][    C0] syz_tun: tun_net_xmit 162
[  413.060103][T15462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2440'.
[  413.191900][T15464] netlink: 'syz.4.2440': attribute type 10 has an invalid length.
[  413.219699][T15464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2440'.
[  413.258609][T15468] netlink: 'syz.1.2441': attribute type 1 has an invalid length.
[  413.355883][T15468] bond21: entered promiscuous mode
[  413.363684][T15468] 8021q: adding VLAN 0 to HW filter on device bond21
[  413.397891][T15476] bond21: (slave bridge7): making interface the new active one
[  413.405739][T15476] bridge7: entered promiscuous mode
[  413.412276][T15476] bond21: (slave bridge7): Enslaving as an active interface with an up link
[  413.453343][T15473] macvtap1: entered allmulticast mode
[  413.621624][T15487] tipc: New replicast peer: 255.255.255.255
[  413.628722][T15487] tipc: Enabled bearer <udp:syz2>, priority 10
[  413.697211][T15489] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.730933][T15489] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 44564 - 0
[  413.910104][    C0] syz_tun: tun_net_xmit 162
[  413.925470][T15489] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.978532][T15489] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 44564 - 0
[  414.016938][T15496] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig
[  414.038447][T15496] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) !
[  414.113180][T15489] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  414.149674][T15509] netlink: 'syz.2.2451': attribute type 1 has an invalid length.
[  414.160075][T15489] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 44564 - 0
[  414.270452][T15489] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  414.309398][T15489] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 44564 - 0
[  414.525830][ T7061] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  414.557619][ T7061] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 44564 - 0
[  414.650412][ T7061] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  414.687126][ T7061] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 44564 - 0
[  414.749083][T15544] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  414.782176][ T5774] tipc: Node number set to 717739698
[  414.823243][ T1336] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  414.846411][ T1336] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 44564 - 0
[  414.897830][ T1336] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  414.925660][ T1336] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 44564 - 0
[  414.950055][    C0] syz_tun: tun_net_xmit 162
[  415.290123][T15561] bond22: entered allmulticast mode
[  415.458808][T15550] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  415.461067][T15563] macvlan2: entered promiscuous mode
[  415.474446][T15563] macvlan2: entered allmulticast mode
[  415.482996][T15563] bond22: (slave macvlan2): Opening slave failed
[  415.771102][T15570] §: renamed from sit0
[  415.850426][T15575] __nla_validate_parse: 6 callbacks suppressed
[  415.850448][T15575] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2472'.
[  415.895837][T15577] netlink: 316 bytes leftover after parsing attributes in process `syz.0.2473'.
[  415.990051][    C0] syz_tun: tun_net_xmit 162
[  416.319094][T15597] netlink: 'syz.2.2478': attribute type 19 has an invalid length.
[  416.475226][T15610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2483'.
[  416.596484][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2482'.
[  416.711204][ T5774] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  416.793102][T15623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2487'.
[  416.793646][ T5774] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  416.999245][T15634] FAULT_INJECTION: forcing a failure.
[  416.999245][T15634] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  417.023575][T15634] CPU: 0 UID: 0 PID: 15634 Comm: syz.2.2491 Not tainted syzkaller #0 PREEMPT(full) 
[  417.023603][T15634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  417.023614][T15634] Call Trace:
[  417.023622][T15634]  <TASK>
[  417.023630][T15634]  dump_stack_lvl+0xe8/0x150
[  417.023659][T15634]  should_fail_ex+0x412/0x560
[  417.023691][T15634]  _copy_from_user+0x2d/0xb0
[  417.023716][T15634]  ___sys_sendmsg+0x1c6/0x360
[  417.023736][T15634]  ? __lock_acquire+0x6b5/0x2cf0
[  417.023759][T15634]  ? __pfx____sys_sendmsg+0x10/0x10
[  417.023814][T15634]  ? __fget_files+0x2a/0x420
[  417.023837][T15634]  ? __fget_files+0x3a0/0x420
[  417.023869][T15634]  __x64_sys_sendmsg+0x1bd/0x2a0
[  417.023892][T15634]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  417.023922][T15634]  ? __pfx_ksys_write+0x10/0x10
[  417.023959][T15634]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.023980][T15634]  do_syscall_64+0x174/0x580
[  417.023999][T15634]  ? trace_irq_disable+0x3b/0x140
[  417.024022][T15634]  ? clear_bhb_loop+0x40/0x90
[  417.024040][T15634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.024055][T15634] RIP: 0033:0x7fc6e079ce59
[  417.024070][T15634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  417.024082][T15634] RSP: 002b:00007fc6e15f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  417.024102][T15634] RAX: ffffffffffffffda RBX: 00007fc6e0a15fa0 RCX: 00007fc6e079ce59
[  417.024115][T15634] RDX: 0000000000000000 RSI: 0000200000002b40 RDI: 0000000000000005
[  417.024127][T15634] RBP: 00007fc6e15f1090 R08: 0000000000000000 R09: 0000000000000000
[  417.024138][T15634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.024150][T15634] R13: 00007fc6e0a16038 R14: 00007fc6e0a15fa0 R15: 00007ffd3ca97548
[  417.024183][T15634]  </TASK>
[  417.211039][    C0] syz_tun: tun_net_xmit 162
[  417.266733][T15636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2492'.
[  417.334491][ T5774] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  417.337287][T15636] netlink: 'syz.0.2492': attribute type 5 has an invalid length.
[  417.352102][T15637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  417.367182][T15636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2492'.
[  417.408606][T15636] geneve3: entered promiscuous mode
[  417.419709][T15636] geneve3: entered allmulticast mode
[  417.428380][ T7061] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 35319 - 0
[  417.450633][ T7061] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 35319 - 0
[  417.478339][ T7061] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 35319 - 0
[  417.488675][ T7061] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 35319 - 0
[  417.803224][T15662] syzkaller0: entered promiscuous mode
[  417.820116][T15662] syzkaller0: entered allmulticast mode
[  418.191254][T15669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2502'.
[  418.230514][    C0] syz_tun: tun_net_xmit 162
[  418.322983][T15672] netlink: 'syz.4.2501': attribute type 39 has an invalid length.
[  418.390144][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  418.422129][T15676] FAULT_INJECTION: forcing a failure.
[  418.422129][T15676] name failslab, interval 1, probability 0, space 0, times 0
[  418.436204][T15676] CPU: 0 UID: 0 PID: 15676 Comm: syz.4.2504 Not tainted syzkaller #0 PREEMPT(full) 
[  418.436231][T15676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  418.436242][T15676] Call Trace:
[  418.436249][T15676]  <TASK>
[  418.436258][T15676]  dump_stack_lvl+0xe8/0x150
[  418.436295][T15676]  should_fail_ex+0x412/0x560
[  418.436321][T15676]  should_failslab+0xa8/0x100
[  418.436341][T15676]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  418.436367][T15676]  ? __alloc_skb+0x186/0x7d0
[  418.436385][T15676]  ? __alloc_skb+0x1d0/0x7d0
[  418.436401][T15676]  ? __local_bh_enable_ip+0xd0/0x130
[  418.436425][T15676]  __alloc_skb+0x1d0/0x7d0
[  418.436447][T15676]  netlink_sendmsg+0x5d4/0xb40
[  418.436479][T15676]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.436505][T15676]  ? aa_sock_msg_perm+0xf1/0x1b0
[  418.436531][T15676]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  418.436566][T15676]  ____sys_sendmsg+0x972/0x9f0
[  418.436587][T15676]  ? __might_fault+0xaf/0x130
[  418.436620][T15676]  ? __pfx_____sys_sendmsg+0x10/0x10
[  418.436651][T15676]  ? import_iovec+0x73/0xa0
[  418.436678][T15676]  ___sys_sendmsg+0x2a5/0x360
[  418.436698][T15676]  ? __lock_acquire+0x6b5/0x2cf0
[  418.436722][T15676]  ? __pfx____sys_sendmsg+0x10/0x10
[  418.436777][T15676]  ? __fget_files+0x2a/0x420
[  418.436798][T15676]  ? __fget_files+0x3a0/0x420
[  418.436828][T15676]  __x64_sys_sendmsg+0x1bd/0x2a0
[  418.436851][T15676]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  418.436882][T15676]  ? __pfx_ksys_write+0x10/0x10
[  418.436918][T15676]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.436938][T15676]  do_syscall_64+0x174/0x580
[  418.436960][T15676]  ? clear_bhb_loop+0x40/0x90
[  418.436984][T15676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.437002][T15676] RIP: 0033:0x7f95b759ce59
[  418.437022][T15676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  418.437037][T15676] RSP: 002b:00007f95b84e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  418.437057][T15676] RAX: ffffffffffffffda RBX: 00007f95b7815fa0 RCX: 00007f95b759ce59
[  418.437070][T15676] RDX: 0000000000000000 RSI: 0000200000002b40 RDI: 0000000000000005
[  418.437081][T15676] RBP: 00007f95b84e9090 R08: 0000000000000000 R09: 0000000000000000
[  418.437091][T15676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  418.437100][T15676] R13: 00007f95b7816038 R14: 00007f95b7815fa0 R15: 00007fff2f6a63f8
[  418.437131][T15676]  </TASK>
[  419.077144][T15688] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2507'.
[  419.118467][T15688] netlink: 'syz.2.2507': attribute type 2 has an invalid length.
[  419.270018][    C0] syz_tun: tun_net_xmit 162
[  419.276165][T15686] syzkaller0: entered promiscuous mode
[  419.294807][T15686] syzkaller0: entered allmulticast mode
[  419.341345][T15694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2509'.
[  420.312873][    C0] syz_tun: tun_net_xmit 162
[  420.958226][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  421.353862][    C0] syz_tun: tun_net_xmit 162
[  422.287221][T15712] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  422.390165][    C0] syz_tun: tun_net_xmit 162
[  422.672728][T15738] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  422.909725][T15749] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2521'.
[  422.964064][T15749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2521'.
[  423.254149][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2526'.
[  423.430088][    C0] syz_tun: tun_net_xmit 162
[  423.512227][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2527'.
[  423.532459][T15772] sctp: [Deprecated]: syz.1.2530 (pid 15772) Use of int in max_burst socket option.
[  423.532459][T15772] Use struct sctp_assoc_value instead
[  423.595588][T15776] bond11: entered allmulticast mode
[  423.630273][T15763] vlan0: entered allmulticast mode
[  423.636462][T15763] macvtap0: entered allmulticast mode
[  423.653124][T15763] veth0_macvtap: entered allmulticast mode
[  424.217845][T15810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2540'.
[  424.316744][T15813] netlink: 'syz.3.2542': attribute type 12 has an invalid length.
[  424.424205][T15816] syzkaller0: entered promiscuous mode
[  424.431907][T15816] syzkaller0: entered allmulticast mode
[  424.470124][    C0] syz_tun: tun_net_xmit 162
[  424.735601][T15824] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2543'.
[  425.516704][    C0] syz_tun: tun_net_xmit 162
[  426.550161][    C0] syz_tun: tun_net_xmit 162
[  427.080574][T15818] macsec0: entered promiscuous mode
[  427.176563][T15818] macsec0: left promiscuous mode
[  427.590156][    C0] syz_tun: tun_net_xmit 162
[  427.722343][T15863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2553'.
[  427.754269][T15863] siw: device registration error -23
[  427.833037][T15867] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  427.908567][   T29] audit: type=1800 audit(1780440106.232:18): pid=15877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2554" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2844 res=0 errno=0
[  428.215837][T15895] netlink: 'syz.4.2559': attribute type 1 has an invalid length.
[  428.261291][T15895] netlink: 'syz.4.2559': attribute type 10 has an invalid length.
[  428.275630][T15895] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2559'.
[  428.630708][    C0] syz_tun: tun_net_xmit 162
[  428.811669][T15925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2570'.
[  428.841125][T15918] tipc: Resetting bearer <eth:syzkaller0>
[  429.042938][T15923] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2568'.
[  429.076899][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2568'.
[  429.152624][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'.
[  429.372106][T15953] syzkaller0: entered promiscuous mode
[  429.379120][T15956] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  429.388632][T15953] syzkaller0: entered allmulticast mode
[  429.670015][    C0] syz_tun: tun_net_xmit 162
[  429.680984][T15971] netlink: 'syz.3.2582': attribute type 1 has an invalid length.
[  429.817900][T15972] syzkaller0: entered promiscuous mode
[  429.845338][T15972] syzkaller0: entered allmulticast mode
[  429.969711][T15986] netlink: 'syz.3.2584': attribute type 1 has an invalid length.
[  430.008550][T15987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2584'.
[  430.090836][T15985] SET target dimension over the limit!
[  430.487311][T15987] 8021q: adding VLAN 0 to HW filter on device bond6
[  430.524272][T16007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2589'.
[  430.710181][    C0] syz_tun: tun_net_xmit 162
[  431.490035][ T7052] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  431.498857][ T7052] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 44564 - 0
[  431.507822][ T7052] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  431.529740][ T7052] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 44564 - 0
[  431.556135][ T7052] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  431.590762][ T7052] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 44564 - 0
[  431.611717][ T7052] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  431.634906][ T7052] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 44564 - 0
[  431.750640][    C0] syz_tun: tun_net_xmit 162
[  432.790347][    C0] syz_tun: tun_net_xmit 162
[  433.830146][    C0] syz_tun: tun_net_xmit 162
[  434.659543][T16051] syzkaller1: entered promiscuous mode
[  434.665341][T16051] syzkaller1: entered allmulticast mode
[  434.870298][    C0] syz_tun: tun_net_xmit 162
[  434.985782][T16078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2604'.
[  434.991979][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2605'.
[  435.021574][T16078] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2604'.
[  435.177473][T16088] netlink: 'syz.1.2608': attribute type 13 has an invalid length.
[  435.267824][T16094] ip6_vti0: Caught tx_queue_len zero misconfig
[  435.619400][T16102] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  435.910105][    C0] syz_tun: tun_net_xmit 162
[  436.310078][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  436.718420][T16158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2626'.
[  436.885464][T16162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2627'.
[  436.951127][    C0] syz_tun: tun_net_xmit 162
[  437.322936][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2631'.
[  437.406685][  T198] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  437.416617][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2631'.
[  437.438716][  T198] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  437.439440][T16177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2632'.
[  437.472820][  T198] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  437.500661][  T198] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  437.589230][T16177] vlan3: entered allmulticast mode
[  437.625598][T16177] macvtap0: entered allmulticast mode
[  437.725880][ T5641] block nbd3: Receive control failed (result -22)
[  437.762812][T16191] nbd3: detected capacity change from 0 to 32
[  437.791990][T15875] block nbd3: Dead connection, failed to find a fallback
[  437.826559][T15875] block nbd3: shutting down sockets
[  437.840481][T15875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  437.853021][T15875] Buffer I/O error on dev nbd3, logical block 0, async page read
[  437.864538][T15875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  437.874039][T15875] Buffer I/O error on dev nbd3, logical block 0, async page read
[  437.886368][T15875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  437.897875][T15875] Buffer I/O error on dev nbd3, logical block 0, async page read
[  437.906631][T15875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  437.921021][T15875] Buffer I/O error on dev nbd3, logical block 0, async page read
[  437.933167][T15875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  437.964987][T15875] Buffer I/O error on dev nbd3, logical block 0, async page read
[  437.980759][T15875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  437.990376][    C0] syz_tun: tun_net_xmit 162
[  438.025250][T15875] Buffer I/O error on dev nbd3, logical block 0, async page read
[  438.049243][T15875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  438.083023][T15875] Buffer I/O error on dev nbd3, logical block 0, async page read
[  438.116434][T15875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  438.161297][T15875] Buffer I/O error on dev nbd3, logical block 0, async page read
[  438.200588][T15875] ldm_validate_partition_table(): Disk read failed.
[  438.202330][T16217] netlink: 'syz.2.2643': attribute type 21 has an invalid length.
[  438.231594][T15875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  438.240016][T16218] netlink: 'syz.2.2643': attribute type 21 has an invalid length.
[  438.250196][T16217] IPv6: NLM_F_CREATE should be specified when creating new route
[  438.272881][T15875] Buffer I/O error on dev nbd3, logical block 0, async page read
[  438.274885][T16218] IPv6: NLM_F_CREATE should be specified when creating new route
[  438.306655][T15875] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  438.323177][T16217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  438.330534][T16217] IPv6: NLM_F_CREATE should be set when creating new route
[  438.337920][T16217] IPv6: NLM_F_CREATE should be set when creating new route
[  438.345289][T16217] IPv6: NLM_F_CREATE should be set when creating new route
[  438.353899][T16218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  438.368097][T15875] Buffer I/O error on dev nbd3, logical block 0, async page read
[  438.373577][T16233] netlink: 'syz.4.2644': attribute type 16 has an invalid length.
[  438.417984][T15875] Dev nbd3: unable to read RDB block 0
[  438.422461][T16233] netlink: 'syz.4.2644': attribute type 17 has an invalid length.
[  438.432776][T15875]  nbd3: unable to read partition table
[  438.453984][T16227] syzkaller0: entered promiscuous mode
[  438.471496][T16227] syzkaller0: entered allmulticast mode
[  438.496326][T15875] ldm_validate_partition_table(): Disk read failed.
[  438.525934][T15875] Dev nbd3: unable to read RDB block 0
[  438.534162][T16235] bridge10: entered promiscuous mode
[  438.553460][T16235] bridge10: entered allmulticast mode
[  438.559375][T15875]  nbd3: unable to read partition table
[  438.602398][T16235] team0: Port device bridge10 added
[  438.702178][T16233] sit0: left promiscuous mode
[  438.746626][T16233] 8021q: adding VLAN 0 to HW filter on device bond0
[  438.766740][T16233] team0: left promiscuous mode
[  438.772804][T16233] geneve1: left promiscuous mode
[  438.779208][T16233] 8021q: adding VLAN 0 to HW filter on device team0
[  438.788687][T16247] netlink: 'syz.2.2647': attribute type 3 has an invalid length.
[  438.800659][T16233] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.855269][T16233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  438.866084][T16233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  438.885159][T16233] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check.
[  439.031690][    C0] syz_tun: tun_net_xmit 162
[  439.105532][T16252] netlink: 'syz.0.2651': attribute type 4 has an invalid length.
[  439.128227][T16252] netlink: 'syz.0.2651': attribute type 4 has an invalid length.
[  439.159156][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2651'.
[  439.180352][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2651'.
[  439.199582][T16252] netlink: 'syz.0.2651': attribute type 15 has an invalid length.
[  440.070408][    C0] syz_tun: tun_net_xmit 162
[  440.093956][T16304] __nla_validate_parse: 2 callbacks suppressed
[  440.093978][T16304] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2666'.
[  440.423864][T16328] IPv6: Can't replace route, no match found
[  440.463779][T16331] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  440.567254][T16330] tipc: Disabling bearer <eth:syzkaller0>
[  440.692414][T16343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2681'.
[  440.697475][T16340] syzkaller0: entered promiscuous mode
[  440.720390][T16340] syzkaller0: entered allmulticast mode
[  440.772630][ T5641] block nbd4: Receive control failed (result -1)
[  441.110249][    C0] syz_tun: tun_net_xmit 162
[  441.251248][T16366] ip6gre3: entered promiscuous mode
[  441.263963][T16366] ip6gre3: entered allmulticast mode
[  441.286195][ T1336] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  441.294611][ T1336] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  441.310265][ T5368] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  441.430572][T16370] veth0_macvtap: Caught tx_queue_len zero misconfig
[  441.540252][ T5368] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  441.572383][T16377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2690'.
[  441.624428][T16379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2690'.
[  441.716452][T16377] 8021q: adding VLAN 0 to HW filter on device bond11
[  441.772699][T16380] 8021q: adding VLAN 0 to HW filter on device bond11
[  441.798683][T16380] bond11: (slave ipip0): The slave device specified does not support setting the MAC address
[  441.811677][T16380] bond11: (slave ipip0): Error -95 calling set_mac_address
[  441.932555][T16390] xt_l2tp: invalid flags combination: 0
[  441.996681][T16395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2696'.
[  442.150031][    C0] syz_tun: tun_net_xmit 162
[  442.199772][T16410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2699'.
[  442.316503][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2701'.
[  442.330175][ T5368] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  442.487383][T16424] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  442.510454][T16422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2703'.
[  442.827879][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2707'.
[  442.967495][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2710'.
[  443.190028][    C0] syz_tun: tun_net_xmit 162
[  443.859287][T16487] bond12: entered allmulticast mode
[  443.883348][T16487] macvlan4: entered promiscuous mode
[  443.889413][T16487] macvlan4: entered allmulticast mode
[  443.896116][T16487] bond12: (slave macvlan4): Opening slave failed
[  444.123035][T16497] veth0_macvtap: entered allmulticast mode
[  444.151424][T16497] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  444.230209][    C0] syz_tun: tun_net_xmit 162
[  444.694368][T16534] netlink: 'syz.3.2735': attribute type 1 has an invalid length.
[  444.737866][T16534] bond7: entered promiscuous mode
[  444.743825][T16534] 8021q: adding VLAN 0 to HW filter on device bond7
[  444.803931][T16534] 8021q: adding VLAN 0 to HW filter on device bond7
[  444.825164][T16534] bond7: (slave vti0): The slave device specified does not support setting the MAC address
[  444.859317][T16534] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  444.897664][T16534] bond7: (slave vti0): making interface the new active one
[  444.907620][T16534] vti0: entered promiscuous mode
[  444.925365][T16534] bond7: (slave vti0): Enslaving as an active interface with an up link
[  445.082249][T16551] batadv0: Caught tx_queue_len zero misconfig
[  445.190091][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  445.270257][    C0] syz_tun: tun_net_xmit 162
[  445.714980][T16579] __nla_validate_parse: 1 callbacks suppressed
[  445.715003][T16579] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2747'.
[  445.766408][T16584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2749'.
[  446.003032][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2753'.
[  446.197428][T16605] netlink: 'syz.4.2756': attribute type 1 has an invalid length.
[  446.212655][T16605] netlink: 'syz.4.2756': attribute type 2 has an invalid length.
[  446.224845][T16605] netlink: 'syz.4.2756': attribute type 3 has an invalid length.
[  446.311069][    C0] syz_tun: tun_net_xmit 162
[  446.543344][T16624] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  446.757197][T16636] No such timeout policy "syz1"
[  446.785088][T16636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2766'.
[  446.818526][T16642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2765'.
[  446.859720][ T1336] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  446.869472][T16642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2765'.
[  446.882640][ T1336] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  446.894156][ T1336] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  446.919401][T16644] geneve5: entered promiscuous mode
[  446.931596][T16644] geneve5: entered allmulticast mode
[  446.969420][ T1336] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  447.093734][T16649] macsec3: entered promiscuous mode
[  447.350300][    C0] syz_tun: tun_net_xmit 162
[  447.661419][T16677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2778'.
[  447.788790][T16684] bridge0: port 1(erspan0) entered blocking state
[  447.800089][T16684] bridge0: port 1(erspan0) entered disabled state
[  447.806975][T16684] erspan0: entered allmulticast mode
[  447.819490][T16684] erspan0: entered promiscuous mode
[  447.830408][T16684] bridge0: port 1(erspan0) entered blocking state
[  447.837223][T16684] bridge0: port 1(erspan0) entered forwarding state
[  447.863889][T16686] erspan0: left allmulticast mode
[  447.880326][T16686] erspan0: left promiscuous mode
[  447.898429][T16686] bridge0: port 1(erspan0) entered disabled state
[  447.923717][T16684] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2780'.
[  447.933551][T16684] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2780'.
[  448.039360][T16698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2785'.
[  448.330211][T16718] xt_hashlimit: size too large, truncated to 1048576
[  448.390074][    C0] syz_tun: tun_net_xmit 162
[  449.248250][T16761] netlink: 'syz.1.2801': attribute type 13 has an invalid length.
[  449.273944][T16761] IPVS: set_ctl: invalid protocol: 47 100.1.1.5:19999
[  449.290444][ T5368] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  449.430195][    C0] syz_tun: tun_net_xmit 162
[  449.488484][T16772] netlink: 'syz.1.2803': attribute type 9 has an invalid length.
[  449.683816][T16780] netlink: 'syz.1.2806': attribute type 1 has an invalid length.
[  449.692939][T16780] netlink: 'syz.1.2806': attribute type 13 has an invalid length.
[  450.070398][ T5368] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  450.183324][T16782] 
[  450.185690][T16782] ======================================================
[  450.192712][T16782] WARNING: possible circular locking dependency detected
[  450.200021][T16782] syzkaller #0 Not tainted
[  450.205301][T16782] ------------------------------------------------------
[  450.212495][T16782] syz.2.2805/16782 is trying to acquire lock:
[  450.218653][T16782] ffff8880268c1828 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  450.228218][T16782] 
[  450.228218][T16782] but task is already holding lock:
[  450.235760][T16782] ffff8880268c1300 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x198/0x450
[  450.246047][T16782] 
[  450.246047][T16782] which lock already depends on the new lock.
[  450.246047][T16782] 
[  450.256545][T16782] 
[  450.256545][T16782] the existing dependency chain (in reverse order) is:
[  450.265557][T16782] 
[  450.265557][T16782] -> #6 (&q->q_usage_counter(io)#54){++++}-{0:0}:
[  450.274343][T16782]        blk_alloc_queue+0x546/0x680
[  450.279896][T16782]        __blk_mq_alloc_disk+0x197/0x390
[  450.285533][T16782]        nbd_dev_add+0x499/0xb50
[  450.290477][T16782]        nbd_init+0x168/0x1f0
[  450.295244][T16782]        do_one_initcall+0x250/0x870
[  450.300533][T16782]        do_initcall_level+0x104/0x190
[  450.306001][T16782]        do_initcalls+0x59/0xa0
[  450.310854][T16782]        kernel_init_freeable+0x2a6/0x3e0
[  450.316677][T16782]        kernel_init+0x1d/0x1d0
[  450.321541][T16782]        ret_from_fork+0x514/0xb70
[  450.326656][T16782]        ret_from_fork_asm+0x1a/0x30
[  450.331964][T16782] 
[  450.331964][T16782] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  450.339181][T16782]        fs_reclaim_acquire+0x71/0x100
[  450.344649][T16782]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  450.350986][T16782]        __alloc_skb+0x27d/0x7d0
[  450.356230][T16782]        __ip6_append_data+0x2d3c/0x3f60
[  450.362130][T16782]        ip6_append_data+0x10f/0x280
[  450.367508][T16782]        rawv6_sendmsg+0x12d3/0x18e0
[  450.372889][T16782]        ____sys_sendmsg+0x80a/0x9f0
[  450.378175][T16782]        ___sys_sendmsg+0x2a5/0x360
[  450.383461][T16782]        __x64_sys_sendmsg+0x1bd/0x2a0
[  450.389050][T16782]        do_syscall_64+0x174/0x580
[  450.394187][T16782]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.400603][T16782] 
[  450.400603][T16782] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  450.408339][T16782]        lock_sock_nested+0x41/0x100
[  450.413626][T16782]        inet_shutdown+0x6a/0x390
[  450.418661][T16782]        nbd_mark_nsock_dead+0x2e9/0x560
[  450.424304][T16782]        recv_work+0x1c2e/0x1d40
[  450.429245][T16782]        process_scheduled_works+0xb5d/0x1860
[  450.435313][T16782]        worker_thread+0xa53/0xfc0
[  450.440515][T16782]        kthread+0x389/0x470
[  450.445199][T16782]        ret_from_fork+0x514/0xb70
[  450.450406][T16782]        ret_from_fork_asm+0x1a/0x30
[  450.456212][T16782] 
[  450.456212][T16782] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  450.463859][T16782]        __mutex_lock+0x1a3/0x1550
[  450.469150][T16782]        nbd_queue_rq+0x37b/0x1100
[  450.470024][    C0] syz_tun: tun_net_xmit 162
[  450.474316][T16782]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  450.484935][T16782]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  450.492146][T16782]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  450.498828][T16782]        blk_mq_run_hw_queue+0x348/0x4f0
[  450.504547][T16782]        blk_mq_dispatch_list+0xd16/0xe10
[  450.510356][T16782]        blk_mq_flush_plug_list+0x48d/0x570
[  450.516257][T16782]        __blk_flush_plug+0x3ed/0x4d0
[  450.521629][T16782]        __submit_bio+0x28d/0x580
[  450.526661][T16782]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  450.532988][T16782]        block_read_full_folio+0x7b7/0x830
[  450.538823][T16782]        filemap_read_folio+0x137/0x3b0
[  450.544547][T16782]        do_read_cache_folio+0x358/0x590
[  450.550189][T16782]        read_part_sector+0xb6/0x2b0
[  450.555479][T16782]        adfspart_check_ICS+0xb1/0x960
[  450.560936][T16782]        bdev_disk_changed+0x817/0x1770
[  450.566481][T16782]        blkdev_get_whole+0x380/0x510
[  450.571857][T16782]        bdev_open+0x31e/0xd30
[  450.576623][T16782]        blkdev_open+0x470/0x610
[  450.582086][T16782]        do_dentry_open+0x822/0x13a0
[  450.587373][T16782]        vfs_open+0x3b/0x340
[  450.591964][T16782]        path_openat+0x2e08/0x3860
[  450.597100][T16782]        do_file_open+0x23e/0x4a0
[  450.602245][T16782]        do_sys_openat2+0x113/0x200
[  450.607462][T16782]        __x64_sys_openat+0x138/0x170
[  450.613017][T16782]        do_syscall_64+0x174/0x580
[  450.618153][T16782]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.624571][T16782] 
[  450.624571][T16782] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  450.631983][T16782]        __mutex_lock+0x1a3/0x1550
[  450.637136][T16782]        nbd_queue_rq+0xc6/0x1100
[  450.642268][T16782]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  450.648363][T16782]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  450.655220][T16782]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  450.661743][T16782]        blk_mq_run_hw_queue+0x348/0x4f0
[  450.667465][T16782]        blk_mq_dispatch_list+0xd16/0xe10
[  450.673192][T16782]        blk_mq_flush_plug_list+0x48d/0x570
[  450.679134][T16782]        __blk_flush_plug+0x3ed/0x4d0
[  450.684595][T16782]        __submit_bio+0x28d/0x580
[  450.689808][T16782]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  450.695968][T16782]        block_read_full_folio+0x7b7/0x830
[  450.701779][T16782]        filemap_read_folio+0x137/0x3b0
[  450.707341][T16782]        do_read_cache_folio+0x358/0x590
[  450.713063][T16782]        read_part_sector+0xb6/0x2b0
[  450.718348][T16782]        adfspart_check_ICS+0xb1/0x960
[  450.724091][T16782]        bdev_disk_changed+0x817/0x1770
[  450.729728][T16782]        blkdev_get_whole+0x380/0x510
[  450.735104][T16782]        bdev_open+0x31e/0xd30
[  450.739960][T16782]        blkdev_open+0x470/0x610
[  450.745252][T16782]        do_dentry_open+0x822/0x13a0
[  450.750579][T16782]        vfs_open+0x3b/0x340
[  450.755203][T16782]        path_openat+0x2e08/0x3860
[  450.760434][T16782]        do_file_open+0x23e/0x4a0
[  450.765618][T16782]        do_sys_openat2+0x113/0x200
[  450.770844][T16782]        __x64_sys_openat+0x138/0x170
[  450.776233][T16782]        do_syscall_64+0x174/0x580
[  450.781447][T16782]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.787927][T16782] 
[  450.787927][T16782] -> #1 (set->srcu){.+.+}-{0:0}:
[  450.795105][T16782]        __synchronize_srcu+0xca/0x300
[  450.800603][T16782]        elevator_switch+0x1e8/0x7a0
[  450.805917][T16782]        elevator_change+0x2cc/0x450
[  450.811231][T16782]        elevator_set_default+0x36c/0x430
[  450.816979][T16782]        blk_register_queue+0x3e9/0x4e0
[  450.822564][T16782]        __add_disk+0x677/0xd50
[  450.827473][T16782]        add_disk_fwnode+0xfb/0x480
[  450.832696][T16782]        nbd_dev_add+0x72c/0xb50
[  450.837655][T16782]        nbd_init+0x168/0x1f0
[  450.842337][T16782]        do_one_initcall+0x250/0x870
[  450.848070][T16782]        do_initcall_level+0x104/0x190
[  450.853549][T16782]        do_initcalls+0x59/0xa0
[  450.858438][T16782]        kernel_init_freeable+0x2a6/0x3e0
[  450.864184][T16782]        kernel_init+0x1d/0x1d0
[  450.869077][T16782]        ret_from_fork+0x514/0xb70
[  450.874235][T16782]        ret_from_fork_asm+0x1a/0x30
[  450.879674][T16782] 
[  450.879674][T16782] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  450.887520][T16782]        __lock_acquire+0x15a5/0x2cf0
[  450.892916][T16782]        lock_acquire+0x106/0x350
[  450.897952][T16782]        __mutex_lock+0x1a3/0x1550
[  450.903162][T16782]        elevator_change+0x1b3/0x450
[  450.908640][T16782]        elevator_set_none+0xb5/0x140
[  450.914197][T16782]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  450.920595][T16782]        nbd_start_device+0x17f/0xb10
[  450.925990][T16782]        nbd_genl_connect+0x165b/0x1cf0
[  450.931565][T16782]        genl_family_rcv_msg_doit+0x22a/0x330
[  450.937731][T16782]        genl_rcv_msg+0x61c/0x7a0
[  450.942776][T16782]        netlink_rcv_skb+0x232/0x4b0
[  450.948184][T16782]        genl_rcv+0x28/0x40
[  450.952825][T16782]        netlink_unicast+0x75c/0x8e0
[  450.958149][T16782]        netlink_sendmsg+0x813/0xb40
[  450.963458][T16782]        ____sys_sendmsg+0x972/0x9f0
[  450.968831][T16782]        ___sys_sendmsg+0x2a5/0x360
[  450.974036][T16782]        __x64_sys_sendmsg+0x1bd/0x2a0
[  450.979780][T16782]        do_syscall_64+0x174/0x580
[  450.984892][T16782]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.991307][T16782] 
[  450.991307][T16782] other info that might help us debug this:
[  450.991307][T16782] 
[  451.001736][T16782] Chain exists of:
[  451.001736][T16782]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#54
[  451.001736][T16782] 
[  451.016202][T16782]  Possible unsafe locking scenario:
[  451.016202][T16782] 
[  451.023685][T16782]        CPU0                    CPU1
[  451.029088][T16782]        ----                    ----
[  451.034459][T16782]   lock(&q->q_usage_counter(io)#54);
[  451.039861][T16782]                                lock(fs_reclaim);
[  451.046626][T16782]                                lock(&q->q_usage_counter(io)#54);
[  451.054723][T16782]   lock(&q->elevator_lock);
[  451.059327][T16782] 
[  451.059327][T16782]  *** DEADLOCK ***
[  451.059327][T16782] 
[  451.067466][T16782] 6 locks held by syz.2.2805/16782:
[  451.072670][T16782]  #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  451.081059][T16782]  #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  451.090557][T16782]  #2: ffff888026a641c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60
[  451.102097][T16782]  #3: ffff888026a640d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60
[  451.113153][T16782]  #4: ffff8880268c1300 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x198/0x450
[  451.123860][T16782]  #5: ffff8880268c1338 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[  451.135004][T16782] 
[  451.135004][T16782] stack backtrace:
[  451.140904][T16782] CPU: 1 UID: 0 PID: 16782 Comm: syz.2.2805 Not tainted syzkaller #0 PREEMPT(full) 
[  451.140923][T16782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  451.140932][T16782] Call Trace:
[  451.140939][T16782]  <TASK>
[  451.140946][T16782]  dump_stack_lvl+0xe8/0x150
[  451.140964][T16782]  print_circular_bug+0x2e1/0x300
[  451.140984][T16782]  check_noncircular+0x12e/0x150
[  451.141004][T16782]  __lock_acquire+0x15a5/0x2cf0
[  451.141027][T16782]  ? elevator_change+0x1b3/0x450
[  451.141043][T16782]  lock_acquire+0x106/0x350
[  451.141056][T16782]  ? elevator_change+0x1b3/0x450
[  451.141083][T16782]  __mutex_lock+0x1a3/0x1550
[  451.141098][T16782]  ? elevator_change+0x1b3/0x450
[  451.141115][T16782]  ? rcu_is_watching+0x15/0xb0
[  451.141133][T16782]  ? work_grab_pending+0x3d1/0x990
[  451.141149][T16782]  ? elevator_change+0x1b3/0x450
[  451.141165][T16782]  ? __pfx___mutex_lock+0x10/0x10
[  451.141179][T16782]  ? enable_work+0x17f/0x230
[  451.141195][T16782]  ? lockdep_hardirqs_on+0x7a/0x110
[  451.141211][T16782]  ? __cancel_work_sync+0xf7/0x110
[  451.141228][T16782]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  451.141247][T16782]  elevator_change+0x1b3/0x450
[  451.141265][T16782]  elevator_set_none+0xb5/0x140
[  451.141282][T16782]  ? __pfx_elevator_set_none+0x10/0x10
[  451.141300][T16782]  ? xa_load+0x1db/0x210
[  451.141317][T16782]  blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  451.141342][T16782]  ? kernfs_add_one+0x477/0x5c0
[  451.141362][T16782]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  451.141385][T16782]  ? sysfs_add_file_mode_ns+0x259/0x300
[  451.141404][T16782]  nbd_start_device+0x17f/0xb10
[  451.141426][T16782]  ? device_create_file+0xf4/0x1b0
[  451.141447][T16782]  nbd_genl_connect+0x165b/0x1cf0
[  451.141467][T16782]  ? __pfx___nla_validate_parse+0x10/0x10
[  451.141488][T16782]  ? __pfx_nbd_genl_connect+0x10/0x10
[  451.141509][T16782]  ? rcu_is_watching+0x15/0xb0
[  451.141525][T16782]  ? trace_kmalloc+0x2a/0xf0
[  451.141546][T16782]  ? __nla_parse+0x40/0x60
[  451.141563][T16782]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  451.141584][T16782]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  451.141606][T16782]  genl_family_rcv_msg_doit+0x22a/0x330
[  451.141629][T16782]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  451.141652][T16782]  ? __lock_acquire+0x6b5/0x2cf0
[  451.141669][T16782]  genl_rcv_msg+0x61c/0x7a0
[  451.141696][T16782]  ? __pfx_genl_rcv_msg+0x10/0x10
[  451.141716][T16782]  ? __pfx_nbd_genl_connect+0x10/0x10
[  451.141740][T16782]  netlink_rcv_skb+0x232/0x4b0
[  451.141756][T16782]  ? __pfx_genl_rcv_msg+0x10/0x10
[  451.141775][T16782]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  451.141795][T16782]  ? down_read+0x270/0x2e0
[  451.141809][T16782]  ? genl_rcv+0xd/0x40
[  451.141827][T16782]  genl_rcv+0x28/0x40
[  451.141845][T16782]  netlink_unicast+0x75c/0x8e0
[  451.141862][T16782]  netlink_sendmsg+0x813/0xb40
[  451.141881][T16782]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.141898][T16782]  ? aa_sock_msg_perm+0xf1/0x1b0
[  451.141919][T16782]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  451.141939][T16782]  ____sys_sendmsg+0x972/0x9f0
[  451.141956][T16782]  ? __might_fault+0xaf/0x130
[  451.141976][T16782]  ? __pfx_____sys_sendmsg+0x10/0x10
[  451.141995][T16782]  ? import_iovec+0x73/0xa0
[  451.142012][T16782]  ___sys_sendmsg+0x2a5/0x360
[  451.142027][T16782]  ? __lock_acquire+0x6b5/0x2cf0
[  451.142042][T16782]  ? __pfx____sys_sendmsg+0x10/0x10
[  451.142060][T16782]  ? futex_wait+0x2a2/0x390
[  451.142093][T16782]  ? __fget_files+0x2a/0x420
[  451.142110][T16782]  ? __fget_files+0x3a0/0x420
[  451.142130][T16782]  __x64_sys_sendmsg+0x1bd/0x2a0
[  451.142146][T16782]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  451.142164][T16782]  ? rcu_is_watching+0x15/0xb0
[  451.142184][T16782]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.142198][T16782]  do_syscall_64+0x174/0x580
[  451.142212][T16782]  ? trace_irq_disable+0x3b/0x140
[  451.142233][T16782]  ? clear_bhb_loop+0x40/0x90
[  451.142249][T16782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.142263][T16782] RIP: 0033:0x7fc6e079ce59
[  451.142277][T16782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  451.142290][T16782] RSP: 002b:00007fc6e15f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  451.142305][T16782] RAX: ffffffffffffffda RBX: 00007fc6e0a15fa0 RCX: 00007fc6e079ce59
[  451.142316][T16782] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000008
[  451.142326][T16782] RBP: 00007fc6e0832d6f R08: 0000000000000000 R09: 0000000000000000
[  451.142335][T16782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  451.142344][T16782] R13: 00007fc6e0a16038 R14: 00007fc6e0a15fa0 R15: 00007ffd3ca97548
[  451.142360][T16782]  </TASK>
[  451.509979][    C0] syz_tun: tun_net_xmit 162
[  451.643054][ T5641] block nbd5: Receive control failed (result -32)
[  451.649730][ T5656] block nbd5: Receive control failed (result -32)
[  452.550132][    C0] syz_tun: tun_net_xmit 162
[  453.590109][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  453.590300][    C0] syz_tun: tun_net_xmit 162
[  454.630156][    C0] syz_tun: tun_net_xmit 162
[  455.670037][    C0] syz_tun: tun_net_xmit 162
[  456.710022][    C0] syz_tun: tun_net_xmit 162
[  457.750298][    C0] syz_tun: tun_net_xmit 162
[  458.790132][    C0] syz_tun: tun_net_xmit 162
[  459.830217][    C0] syz_tun: tun_net_xmit 162